Updated on 2023-08-04 GMT+08:00

Notes and Constraints

The following table lists the quotas of various resources on IAM. For details, see How Do I Increase My Quota?

Category

Item

Quota

Adjustable

User

IAM users

50

Yes

Characters allowed in a username

32

No

Groups to which a user can be added

10

No

AK/SK pairs that a user can create

2

No

Virtual MFA devices that can be associated with a user

1

No

Permissions (including system-defined permissions and custom policies) that can be assigned to a user for enterprise projects

500

Yes

User group

User groups

20

Yes

Characters allowed in a user group name

64

No

Users that can be added to a user group

IAM users who have been created using your account

No

Permissions (including system-defined permissions and custom policies) that can be assigned to a user group for IAM projects

200

Yes

Permissions (including system-defined permissions and custom policies) that can be assigned to a user group for enterprise projects

500

Yes

Project

Subprojects in each region

10

Yes

Policy

Characters allowed in a policy name

64

No

Custom policy

Custom policies

200

Yes

Characters per policy

6,144

No

Statements per policy

Unlimited

No

Actions per statement

Unlimited

No

Resources per statement

Unlimited

No

Conditions per statement

Unlimited

No

Agency

Agencies

50

Yes

Characters allowed in an agency name

64

No

Permissions (including system-defined permissions and custom policies) that can be assigned to an agency

200

Yes

Identity provider

Quantity

10

Yes

Characters that can be contained in an identity provider name

64

No

Mapping rules of all identity providers in an account

10

Yes