The following table lists the quotas of various resources on IAM. The "√" mark indicates that you can increase the quota to meet service requirements. For details, see "How Do I Increase My Quota?" in the Identity and Access Management User Guide.
Item | Limit | Changeable | |
|---|---|---|---|
IAM users | 50 | √ | |
User groups | 20 | √ | |
Maximum number of users who can be added to a user group | Number of IAM users who have been created using your account | x | |
Agencies | 50 | √ | |
Number of groups to which a user can be added | 10 | x | |
Number of AK/SK pairs that a user can create | 2 | x | |
Number of virtual MFA devices that can be bound to a user | 1 | x | |
Custom policies | 200 | √ | |
Number of permissions (including system-defined policies and roles and custom policies) that can be bound to a user group based on IAM projects | 200 | √ | |
Number of permissions (including system-defined policies and roles and custom policies) that can be bound to an agency | 200 | √ | |
Number of permissions (including system-defined policies and roles and custom policies) that can be bound to a user group based on enterprise projects | 500 | √ | |
Number of permissions (including system-defined policies and roles and custom policies) that can be bound to a user based on enterprise projects | 500 | √ | |
Number of subprojects in each region | 10 | √ | |
Number of characters allowed in a username | 32 | x | |
Number of characters allowed in a user group name | 64 | x | |
Number of characters allowed in a policy name | 64 | x | |
Custom policy | Maximum number of characters | 6144 | x |
Maximum number of statements | Up to 8 statements per policy | x | |
Actions | Up to 100 actions per statement | x | |
Resources | Up to 10 resources per statement | x | |
Conditions | Up to 10 conditions per statement | x | |
Number of characters allowed in an agency name | 64 | x | |
Identity providers | Quantity | 10 | √ |
Maximum number of characters that can be contained in an identity provider name | 64 | x | |
Total number of mapping rules of all identity providers in an account | 20 | √ | |