Quotas and service limits for Amazon Organizations

Number of Amazon Web Services accounts in an organization

10 — The default maximum number of accounts allowed in an organization. If you need more, you can request an increase by using the Service Quotas console.

Note: Only the Management account of an organization can submit this quota increase request. Limit increases can be granted up to 10,000 accounts based on customer qualifications and requirements. Newly created accounts and organizations might experience a quota below the default of 10 accounts.

An invitation sent to an account counts against this quota. The count is returned if the invited account declines, the management account cancels the invitation, or the invitation expires.

When an account is closed it does not stop counting against this quota until it is permanently closed. For more information on when an account is permanently closed, see Post-closure period in the Amazon Account Management Reference Guide.

Some services have account limits separate from the maximum number of accounts allowed in an organization. For more information, see Limits by Amazon service.

Number of roots in an organization

1

Number of OUs in an organization

1000

Number of policies of each type in an organization

Service control policies: 2000

Backup policies: 1000

Tag policies: 1000

Chatbot policies: 1000

AI services opt-out policies: 1000

Maximum size of a policy document

Service control policies: 5120 characters

Backup policies: 10,000 characters

Chatbot policies: 10,000 characters

AI services opt-out policies: 2500 characters

Tag policies: 10,000 characters

Note: If you save the policy by using the Amazon Web Services Management Console, extra white space (such as spaces and line breaks) between JSON elements and outside of quotation marks, is removed and not counted. If you save the policy using an SDK operation or the Amazon CLI, then the policy is saved exactly as you provided and no automatic removal of characters occurs.

OU maximum nesting in a root

Five levels of OUs deep under a root.

Maximum number of invitation attempts you can perform in a 24-hour period

Either 20 or the maximum number of accounts allowed in your organization, whichever is greater. Accepted invitations don't count against this quota. As soon as one invitation is accepted, you can send another invitation that same day.

If the maximum number of accounts allowed in your organization is less than 20, then you get an "account limit exceeded" exception if you attempt to invite more accounts than your organization can contain. However, you can cancel invitations and send new ones up to the maximum of 20 attempts in one day.

Number of member accounts you can create concurrently

5 — As soon as one finishes, you can start another, but only five can be in progress at a time.

10% of member accounts in an organization, with a maximum of 1000.

After you reach this quota, you can close additional accounts or wait until your quota resets. For more information, see Close an Amazon account in the Amazon Account Management Guide.

Number of entities to which you can attach a policy

Unlimited

Number of tags that you can attach to a root, OU, or account

50