Service quotas for Amazon RAM - Amazon Resource Access Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Service quotas for Amazon RAM

Your Amazon Web Services account has the following limits related to Amazon Resource Access Manager (Amazon RAM). You can request an increase for some of these limits. To request a limit increase, contact Amazon Web Services Support.

Note

The following definitions apply to the description in the quotas below:

  • Resource – An individual Amazon Web Service-created element that you want to share, such as an Amazon S3 bucket or an Amazon EC2 instance. Each resource referenced in a resource share counts as one against this quota. If you share the same resource in three different resource shares, it increases your count for this quota by three.

  • Resource share – An Amazon RAM created container that you can use to share resources. Each resource share, regardless of how many resources it contains, counts as one against your quota.

  • Shared principal – An identifier that you've associated with a resource share. This can be an Amazon Identity and Access Management (IAM) role or user, an Amazon Web Services account identifier, an organizational unit, or an entire organization. Each shared principal that you reference in a resource share adds one to your quota use. If you share with an entire organization by referencing its ID, it counts as only one against this quota.

  • Customer managed permission – Managed permissions that you create to address specific use cases using least privilege access to manage how your shared resources are used.

Resource Default limit

Maximum number of resource shares per Amazon Web Services Region

25,000

Maximum number of resource associations per resource share

5,000

Maximum number of principal associations per resource share

5,000

Maximum number of customer managed permissions

1,500

Maximum number of customer managed permissions per resource type

10

Maximum number of versions per customer managed permission

5

Maximum number of resource associations across all resource shares in an Amazon Web Services Region

Note

Each resource included in a resource share counts against this limit. If a resource is included in 10 different resource shares, that counts 10 against the limit.

25,000

Maximum number of principal associations across all resource shares in an Amazon Web Services Region

Note

Each principal included in a resource share counts against this limit. If a principal is included in 10 different resource shares, that counts 10 against the limit.

25,000

Maximum number of pending invitations per sharing account

  • This quota applies to only sending accounts who are sharing with accounts that are not part of the same Amazon Organizations.

  • There is no quota to limit how many pending invitations a receiving account can have.

  • Invitations are not used when sharing between accounts that are part of the same Amazon Organizations and you've turned on resource sharing within the Amazon Organizations.

250