AWS Batch job definition should not run privileged containers

What it checks

AWS Batch job definition should not run privileged containers

Where it applies

Terraform: aws_batch_job_definition

CloudFormation: AWS::Batch::JobDefinition

How to fix it

1. Remove privileged = true from container_properties. If a specific Linux capability is required, add only that capability via linuxParameters.capabilities.add and drop the rest.

Frameworks

• SOC 2 CC6.1
• NIST 800-53 rev5 AC-6

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules