Back to All Checks
Low Batch Regional

Compute resources properties in managed Batch compute environments should be tagged

Description

Flags managed AWS Batch compute environments whose computeResources block has no user-defined tags. These tags are propagated to EC2 instances launched by the compute environment, so missing tags leave the underlying instances operationally opaque. The control does not evaluate unmanaged environments or managed environments that use AWS Fargate resources.

Remediation

Apply at least one user-defined tag to the compute resources property of every managed Batch compute environment.

Steps

  1. Open the AWS Batch console and choose Compute environments.
  2. Select the affected managed environment and choose Edit.
  3. Under Compute resources / Instance configuration, add at least one tag with a non-aws: prefixed key.
  4. Save the changes.
Start Your Free Security Check