AWS Batch adds security settings for restricted EKS clusters

AWS says Batch jobs on Amazon EKS now support additional security settings, allowing jobs to run on clusters that enforce Kubernetes' restricted security profile with only the privileges and system calls they require. The additions include Linux capabilities, seccomp profiles that restrict system calls, and settings shared across a pod. Teams configure these controls in job definitions through the console, command-line tools, software development kits or CloudFormation. Container settings override pod defaults. The additions are available in all AWS Regions where Batch is available.