Notes and Constraints

The following table lists the default quotas of various resources on IAM. For details, see How Do I Increase My Quota?

Category	Item		Default Quota	Maximum Value	Adjustable
User	IAM users		50	2000	Yes
	Characters allowed in a username		64	-	No
	Identity policies you can attach to a user		10	20	√
	User groups a user can belong to		10	-	No
	AK/SK pairs that a user can create		2	-	No
	Virtual MFA devices you can add to a user		1	-	No
User group	User groups		20	2000	Yes
	Characters allowed in a user group name		128	-	No
	Users you can add to a user group		IAM users in your account	-	No
	Identity policies you can attach to a user group		10	-	No
Agency and trust agency	Characters allowed in a trust agency name		64	-	No
	Total agencies and trust agencies		50	5000	Yes
	Permissions (including system-defined and custom identity policies) assigned to an agency or trust agency		10	20	Yes
Identity policy	Custom identity policies		1,500	5000	Yes
	Custom identity policy versions		5	-	No
	Characters allowed in an identity policy name		128	-	No
	Custom identity policy	Bytes	6,144	-	No
		Bytes allowed in a statement	There is no limit for each statement, but the total number of bytes of an identity policy cannot exceed 6,144.	-	No
		Bytes allowed in an action	There is no limit for each action, but the total number of bytes of an identity policy cannot exceed 6,144.	-	No
		Bytes allowed in a resource	There is no limit for each resource, but the total number of bytes of an identity policy cannot exceed 6,144.	-	No
		Bytes allowed in a condition	There is no limit for each condition, but the total number of bytes of an identity policy cannot exceed 6,144.	-	No