AWS Batch announced new security context options for jobs that run on Amazon EKS. You can now specify Linux capabilities, a seccomp profile and pod‑wide settings such as fsGroup in the job definition. The settings are added via the RegisterJobDefinition API or through the console, CLI, SDKs or CloudFormation. Container‑level values override any pod‑level defaults. The feature is available in every AWS Region where Batch is offered.
Why it matters
It lets customers run batch workloads with only the privileges they need, reducing the attack surface for EKS clusters.
