AWS CloudFormation
User Guide (Version )

AWS::Batch::JobDefinition ContainerProperties

Container properties are used in job definitions to describe the container that is launched as part of a job.

Syntax

To declare this entity in your AWS CloudFormation template, use the following syntax:

JSON

{ "Command" : [ String, ... ], "Environment" : [ Environment, ... ], "Image" : String, "InstanceType" : String, "JobRoleArn" : String, "Memory" : Integer, "MountPoints" : [ MountPoints, ... ], "Privileged" : Boolean, "ReadonlyRootFilesystem" : Boolean, "ResourceRequirements" : [ ResourceRequirement, ... ], "Ulimits" : [ Ulimit, ... ], "User" : String, "Vcpus" : Integer, "Volumes" : [ Volumes, ... ] }

Properties

Command

The command that is passed to the container. This parameter maps to Cmd in the Create a container section of the Docker Remote API and the COMMAND parameter to docker run. For more information, see https://docs.docker.com/engine/reference/builder/#cmd.

Required: No

Type: List of String

Update requires: No interruption

Environment

The environment variables to pass to a container. This parameter maps to Env in the Create a container section of the Docker Remote API and the --env option to docker run.

Important

We do not recommend using plaintext environment variables for sensitive information, such as credential data.

Note

Environment variables must not start with AWS_BATCH; this naming convention is reserved for variables that are set by the AWS Batch service.

Required: No

Type: List of Environment

Update requires: No interruption

Image

The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with repository-url/image:tag . Up to 255 letters (uppercase and lowercase), numbers, hyphens, underscores, colons, periods, forward slashes, and number signs are allowed. This parameter maps to Image in the Create a container section of the Docker Remote API and the IMAGE parameter of docker run.

  • Images in Amazon ECR repositories use the full registry and repository URI (for example, 012345678910.dkr.ecr.<region-name>.amazonaws.com/<repository-name>).

  • Images in official repositories on Docker Hub use a single name (for example, ubuntu or mongo).

  • Images in other repositories on Docker Hub are qualified with an organization name (for example, amazon/amazon-ecs-agent).

  • Images in other online repositories are qualified further by a domain name (for example, quay.io/assemblyline/ubuntu).

Required: Yes

Type: String

Update requires: No interruption

InstanceType

The instance type to use for a multi-node parallel job. Currently all node groups in a multi-node parallel job must use the same instance type. This parameter is not valid for single-node container jobs.

Required: No

Type: String

Update requires: No interruption

JobRoleArn

The Amazon Resource Name (ARN) of the IAM role that the container can assume for AWS permissions.

Required: No

Type: String

Update requires: No interruption

Memory

The hard limit (in MiB) of memory to present to the container. If your container attempts to exceed the memory specified here, the container is killed. This parameter maps to Memory in the Create a container section of the Docker Remote API and the --memory option to docker run. You must specify at least 4 MiB of memory for a job.

Note

If you are trying to maximize your resource utilization by providing your jobs as much memory as possible for a particular instance type, see Memory Management in the AWS Batch User Guide.

Required: Yes

Type: Integer

Update requires: No interruption

MountPoints

The mount points for data volumes in your container. This parameter maps to Volumes in the Create a container section of the Docker Remote API and the --volume option to docker run.

Required: No

Type: List of MountPoints

Update requires: No interruption

Privileged

When this parameter is true, the container is given elevated privileges on the host container instance (similar to the root user). This parameter maps to Privileged in the Create a container section of the Docker Remote API and the --privileged option to docker run.

Required: No

Type: Boolean

Update requires: No interruption

ReadonlyRootFilesystem

When this parameter is true, the container is given read-only access to its root file system. This parameter maps to ReadonlyRootfs in the Create a container section of the Docker Remote API and the --read-only option to docker run.

Required: No

Type: Boolean

Update requires: No interruption

ResourceRequirements

The type and amount of a resource to assign to a container. Currently, the only supported resource is GPU.

Required: No

Type: List of ResourceRequirement

Update requires: No interruption

Ulimits

A list of ulimits to set in the container. This parameter maps to Ulimits in the Create a container section of the Docker Remote API and the --ulimit option to docker run.

Required: No

Type: List of Ulimit

Update requires: No interruption

User

The user name to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.

Required: No

Type: String

Update requires: No interruption

Vcpus

The number of vCPUs reserved for the container. This parameter maps to CpuShares in the Create a container section of the Docker Remote API and the --cpu-shares option to docker run. Each vCPU is equivalent to 1,024 CPU shares. You must specify at least one vCPU.

Required: Yes

Type: Integer

Update requires: No interruption

Volumes

A list of data volumes used in a job.

Required: No

Type: List of Volumes

Update requires: No interruption

On this page: