Notes and Constraints

The following table lists the quotas of various resources on IAM. For details, see "How Do I Increase My Quota?" in the Identity and Access Management User Guide.

Category	Item	Quota	Adjustable
User	IAM users	50	Yes
	Characters allowed in a username	32	No
	Groups to which a user can be added	10	No
	AK/SK pairs that a user can create	2	No
	Virtual MFA devices that can be associated with a user	1	No
	Permissions (including system-defined permissions and custom policies) that can be assigned to a user for enterprise projects	500	Yes
User group	User groups	20	Yes
	Characters allowed in a user group name	128	No
	Users that can be added to a user group	IAM users who have been created using your account	No
	Permissions (including system-defined permissions and custom policies) that can be assigned to a user group for IAM projects	200	Yes
	Permissions (including system-defined permissions and custom policies) that can be assigned to a user group for enterprise projects	500	Yes
Project	Subprojects in each region	10	Yes
Policy	Characters allowed in a policy name	128	No
Custom policy	Custom policies	200	Yes
	Characters per policy	6,144	No
	Statements per policy	8	No
	Actions per statement	100	No
	Resources per statement	10	No
	Conditions per statement	10	No
Agency	Agencies	50	Yes
	Characters allowed in an agency name	64	No
	Permissions (including system-defined permissions and custom policies) that can be assigned to an agency	200	Yes
Identity provider	Quantity	10	Yes
	Characters that can be contained in an identity provider name	64	No
	Mapping rules of all identity providers in an account	10	Yes
	User groups associated with a federated virtual user	100	x
	Characters allowed in a federated virtual user name	255	x