@@ -46,53 +46,54 @@ Minimal permissions policies to be attached to the AWS account used by Nextflow
4646- To use AWS Batch:
4747
4848 ``` json
49- " batch:DescribeJobQueues"
5049 " batch:CancelJob"
51- " batch:SubmitJob"
52- " batch:ListJobs"
5350 " batch:DescribeComputeEnvironments"
54- " batch:TerminateJob"
51+ " batch:DescribeJobDefinitions"
52+ " batch:DescribeJobQueues"
5553 " batch:DescribeJobs"
54+ " batch:ListJobs"
5655 " batch:RegisterJobDefinition"
57- " batch:DescribeJobDefinitions"
56+ " batch:SubmitJob"
57+ " batch:TagResource"
58+ " batch:TerminateJob"
5859 ```
5960
6061- To view [ EC2] ( https://aws.amazon.com/ec2/ ) instances:
6162
6263 ``` json
63- " ecs:DescribeTasks "
64+ " ec2:DescribeInstanceAttribute "
6465 " ec2:DescribeInstances"
66+ " ec2:DescribeInstanceStatus"
6567 " ec2:DescribeInstanceTypes"
66- " ec2:DescribeInstanceAttribute"
6768 " ecs:DescribeContainerInstances"
68- " ec2:DescribeInstanceStatus "
69+ " ecs:DescribeTasks "
6970 ```
7071
7172- To pull container images from [ ECR] ( https://aws.amazon.com/ecr/ ) repositories:
7273
7374 ``` json
74- " ecr:GetAuthorizationToken"
7575 " ecr:BatchCheckLayerAvailability"
76- " ecr:GetDownloadUrlForLayer"
77- " ecr:GetRepositoryPolicy"
78- " ecr:DescribeRepositories"
79- " ecr:ListImages"
80- " ecr:DescribeImages"
8176 " ecr:BatchGetImage"
77+ " ecr:DescribeImages"
78+ " ecr:DescribeImageScanFindings"
79+ " ecr:DescribeRepositories"
80+ " ecr:GetAuthorizationToken"
81+ " ecr:GetDownloadUrlForLayer"
8282 " ecr:GetLifecyclePolicy"
8383 " ecr:GetLifecyclePolicyPreview"
84+ " ecr:GetRepositoryPolicy"
85+ " ecr:ListImages"
8486 " ecr:ListTagsForResource"
85- " ecr:DescribeImageScanFindings"
8687 ```
8788
8889:::{note}
8990If you are running Fargate or Fargate Spot, you may need the following policies in addition to the listed above:
9091 ``` json
92+ " ec2:DescribeSubnets"
9193 " ecs:CreateCluster"
9294 " ecs:DeleteCluster"
9395 " ecs:DescribeClusters"
9496 " ecs:ListClusters"
95- " ec2:DescribeSubnets"
9697 ```
9798:::
9899
0 commit comments