CloudWatch service quotas
Amazon CloudWatch provides monitoring and observability for your AWS resources and applications. To help ensure optimal performance and prevent abuse, CloudWatch imposes service quotas on various aspects of its functionality. This chapter outlines the key quotas for CloudWatch services, including metrics, alarms, API requests, and notifications. Understanding these quotas is crucial for effectively planning and managing your CloudWatch usage.
Note
For some AWS services including CloudWatch, you can use the CloudWatch usage metrics to visualize your current service usage on CloudWatch graphs and dashboards. You can use a CloudWatch metric math function to display the service quotas for those resources on your graphs. You can also configure alarms that alert you when your usage approaches a service quota. For more information, see Visualizing your service quotas and setting alarms.
Topics
CloudWatch
This section details the service quotas specifically for core CloudWatch functionality. These quotas cover aspects such as metrics, alarms, API requests, and dashboards. Familiarizing yourself with these limits helps you optimize your CloudWatch configuration and avoid potential throttling or service disruptions.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Canary limit | Each supported Region: 500 |
Yes |
The maximum number of canaries per account per region. |
| Number of Alarm Mute Rules | Each supported Region: 2,000 | No | The maximum number of Alarm Mute Rules that you can have in this account in the current region. |
| Number of Contributor Insights rules | Each supported Region: 100 |
Yes |
The maximum number of Contributor Insights rules you can have in this account. |
| Number of Metrics Insights alarms | Each supported Region: 200 | No | The maximum number of Metrics Insights alarms that you can have in this account in the current region. |
| Number of PromQL alarms | Each supported Region: 15,000 | No | The maximum number of PromQL alarms that you can have in this account in the current region. |
| Rate of ANOMALY_DETECTION_BAND usage in GetMetricData | Each supported Region: 1,000 | No | The maximum number of times the ANOMALY_DETECTION_BAND function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of DB_PERF_INSIGHTS usage in GetMetricData | Each supported Region: 4 | No | The maximum number of times the DB_PERF_INSIGHTS function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of DeleteAlarmMuteRule requests | Each supported Region: 3 per second | No | The maximum number of DeleteAlarmMuteRule requests that you can make, per second, in this account in the current region. |
| Rate of DeleteAlarms requests | Each supported Region: 3 per second | No | The maximum number of DeleteAlarms requests that you can make, per second, in this account in the current region. |
| Rate of DeleteAnomalyDetector requests | Each supported Region: 5 per second | No | The maximum number of DeleteAnomalyDetector requests that you can make, per second, in this account in the current region. |
| Rate of DeleteDashboards requests | Each supported Region: 10 per second |
Yes |
The maximum number of DeleteDashboards requests that you can make, per second, in this account in the current region. |
| Rate of DeleteInsightRules requests | Each supported Region: 5 per second | No | The maximum number of DeleteInsightRules requests you can make per second in this account. |
| Rate of DeleteMetricStream requests | Each supported Region: 10 per second |
Yes |
The maximum number of DeleteMetricStream requests that you can make, per second, in this account in the current region. |
| Rate of DescribeAlarmContributors requests | Each supported Region: 9 per second |
Yes |
The maximum number of DescribeAlarmContributors requests that you can make, per second, in this account in the current region. |
| Rate of DescribeAlarmHistory requests | Each supported Region: 20 per second | No | The maximum number of DescribeAlarmHistory requests that you can make, per second, in this account in the current region. |
| Rate of DescribeAlarms requests | Each supported Region: 9 per second |
Yes |
The maximum number of DescribeAlarms requests that you can make, per second, in this account in the current region. |
| Rate of DescribeAlarmsForMetric requests | Each supported Region: 9 per second | No | The maximum number of DescribeAlarmsForMetric requests that you can make, per second, in this account in the current region. |
| Rate of DescribeAnomalyDetectors requests | Each supported Region: 10 per second |
Yes |
The maximum number of DescribeAnomalyDetectors requests that you can make, per second, in this account in the current region. |
| Rate of DescribeInsightRules requests | Each supported Region: 20 per second | No | The maximum number of DescribeInsightRules requests you can make per second in this account. |
| Rate of DisableAlarmActions requests | Each supported Region: 3 per second | No | The maximum number of DisableAlarmActions requests that you can make, per second, in this account in the current region. |
| Rate of DisableInsightRules requests | Each supported Region: 1 per second | No | The maximum number of DisableInsightRules requests you can make per second in this account. |
| Rate of EnableAlarmActions requests | Each supported Region: 3 per second | No | The maximum number of EnableAlarmActions requests that you can make, per second, in this account in the current region. |
| Rate of EnableInsightRules requests | Each supported Region: 1 per second | No | The maximum number of EnableInsightRules requests you can make per second in this account. |
| Rate of GetAlarmMuteRule requests | Each supported Region: 20 per second |
Yes |
The maximum number of GetAlarmMuteRule requests that you can make, per second, in this account in the current region. |
| Rate of GetDashboard requests | Each supported Region: 10 per second |
Yes |
The maximum number of GetDashboard requests that you can make, per second, in this account in the current region. |
| Rate of GetInsightRuleReport requests | Each supported Region: 20 per second |
Yes |
The maximum number of GetInsightRuleReport requests you can make, per second in this account. |
| Rate of GetMetricData datapoints for metrics older than three hours | Each supported Region: 396,000 | No | The maximum number of GetMetricData datapoints that you can fetch, per second, for a request with a StartTime of more than three hours in this account in the current region. |
| Rate of GetMetricData datapoints for the last three hours of metrics | Each supported Region: 180,000 | No | The maximum number of GetMetricData datapoints that you can fetch, per second, for a request with a StartTime of less than or equal to three hours in this account in the current region. |
| Rate of GetMetricData datapoints using Metrics Insights | Each supported Region: 4,300,000 | No | The maximum number of GetMetricData datapoints that you can fetch using Metrics Insights, per second, for a request with a StartTime of less than or equal to three hours in this account in the current region. |
| Rate of GetMetricData requests | Each supported Region: 500 per second |
Yes |
The maximum number of GetMetricData requests that you can make, per second, in this account in the current region. |
| Rate of GetMetricStatistics requests | Each supported Region: 400 per second |
Yes |
The maximum number of GetMetricStatistics requests that you can make, per second, in this account in the current region. |
| Rate of GetMetricStream requests | Each supported Region: 10 per second |
Yes |
The maximum number of GetMetricStream requests that you can make, per second, in this account in the current region. |
| Rate of GetMetricWidgetImage requests | Each supported Region: 20 per second |
Yes |
The maximum number of GetMetricWidgetImage requests that you can make, per second, in this account in the current region. |
| Rate of INSIGHT_RULE_METRIC usage in GetMetricData | Each supported Region: 20 | No | The maximum number of times the INSIGHT_RULE_METRIC function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of LAMBDA usage in GetMetricData | Each supported Region: 5 | No | The maximum number of times the LAMBDA function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of ListAlarmMuteRules requests | Each supported Region: 50 per second |
Yes |
The maximum number of ListAlarmMuteRules requests that you can make, per second, in this account in the current region. |
| Rate of ListDashboards requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListDashboards requests that you can make, per second, in this account in the current region. |
| Rate of ListMetricStreams requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListMetricStreams requests that you can make, per second, in this account in the current region. |
| Rate of ListMetrics requests | Each supported Region: 25 per second |
Yes |
The maximum number of ListMetrics requests that you can make, per second, in this account in the current region. |
| Rate of ListTagsForResource requests | Each supported Region: 10 per second | No | The maximum number of ListTagsForResource requests that you can make, per second, in this account in the current region. |
| Rate of Metrics Insights usage in GetMetricData | Each supported Region: 10 | No | The maximum number of times Metrics Insights can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of PutAlarmMuteRule requests | Each supported Region: 3 per second |
Yes |
The maximum number of PutAlarmMuteRule requests that you can make, per second, in this account in the current region. |
| Rate of PutAnomalyDetector requests | Each supported Region: 10 per second |
Yes |
The maximum number of PutAnomalyDetector requests that you can make, per second, in this account in the current region. |
| Rate of PutCompositeAlarm requests | Each supported Region: 3 per second |
Yes |
The maximum number of PutCompositeAlarm requests that you can make, per second, in this account in the current region. |
| Rate of PutDashboard requests | Each supported Region: 10 per second |
Yes |
The maximum number of PutDashboard requests that you can make, per second, in this account in the current region. |
| Rate of PutInsightRule requests | Each supported Region: 5 per second | No | The maximum number of PutInsightRule requests you can make, per second in this account. |
| Rate of PutLogAlarm requests | Each supported Region: 3 per second | No | The maximum number of PutLogAlarm requests that you can make, per second, in this account in the current region. |
| Rate of PutMetricAlarm requests | Each supported Region: 3 per second |
Yes |
The maximum number of PutMetricAlarm requests that you can make, per second, in this account in the current region. |
| Rate of PutMetricData requests | Each supported Region: 500 per second |
Yes |
The maximum number of PutMetricData requests that you can make, per second, in this account in the current region. |
| Rate of PutMetricStream requests | Each supported Region: 10 per second |
Yes |
The maximum number of PutMetricStream requests that you can make, per second, in this account in the current region. |
| Rate of SEARCH usage in GetMetricData | Each supported Region: 50 | No | The maximum number of times the SEARCH function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of SERVICE_QUOTA usage in GetMetricData | Each supported Region: 1,000 | No | The maximum number of times the SERVICE_QUOTA function can be used in all GetMetricData requests, per second, in this account in the current region. |
| Rate of SetAlarmState requests | Each supported Region: 3 per second | No | The maximum number of SetAlarmState requests that you can make, per second, in this account in the current region. |
| Rate of StartMetricStreams requests | Each supported Region: 10 per second |
Yes |
The maximum number of StartMetricStreams requests that you can make, per second, in this account in the current region. |
| Rate of StopMetricStreams requests | Each supported Region: 10 per second |
Yes |
The maximum number of StopMetricStreams requests that you can make, per second, in this account in the current region. |
| Rate of TagResource requests | Each supported Region: 20 per second | No | The maximum number of TagResource requests that you can make, per second, in this account in the current region. |
| Rate of UntagResource requests | Each supported Region: 20 per second | No | The maximum number of UntagResource requests that you can make, per second, in this account in the current region. |
CloudWatch investigations (Amazon AI Operations)
CloudWatch investigations (Amazon AI Operations) enables intelligent problem detection and root cause analysis. This section outlines the quotas related to concurrent investigations, investigation groups, and AI-assisted analyses.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Concurrent active investigations | Each supported Region: 2 | No | The maximum number of concurrent investigations with active AI analysis per account per region. |
| Investigation groups | Each supported Region: 1 | No | The maximum number of investigation groups that can be created per account in a region. |
| Monthly investigations | Each supported Region: 150 | No | The maximum number of AI-assisted investigations per month in this account in the current region. |
CloudWatch Application Insights
CloudWatch Application Insights helps you monitor your applications and troubleshoot issues quickly. This section presents the quotas for CloudWatch Application Insights, including limits on API requests, applications, log streams, and metrics. Knowing these quotas allows you to effectively plan your application monitoring setup.
| Resource | Default quota | Adjustable |
|---|---|---|
|
API requests |
All API actions are throttled to 5 TPS |
No |
| Resource Group applications |
100 per account |
No |
| Account applications |
1 per account |
No |
| Log Streams |
5 per resource |
No |
| Observations per problem |
20 per dashboard 40 per DescribeProblemObservations action |
No |
| Metrics |
60 per resource |
No |
CloudWatch Application Signals
CloudWatch Application Signals provides deep insights into your application's performance and dependencies. This section covers the quotas for Application Signals, including API request limits and service-level objective (SLO) constraints. Understanding these quotas is crucial for implementing effective application performance monitoring.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Number of SLOs per Region | Each supported Region: 250 |
Yes |
The maximum number of SLOs that you can have in this account in the current region. |
| Number of SLOs per Service | Each supported Region: 100 |
Yes |
The maximum number of SLOs that you can have per service in the current region. |
| Rate of BatchGetServiceLevelObjectiveBudgetReport requests | Each supported Region: 10 per second |
Yes |
The maximum number of BatchGetServiceLevelObjectiveBudgetReport requests you can make per second in this Region. |
| Rate of BatchUpdateExclusionWindows requests | Each supported Region: 5 per second |
Yes |
The maximum number of BatchUpdateExclusionWindows requests you can make per second in this Region. |
| Rate of CreateServiceLevelObjective requests | Each supported Region: 5 per second |
Yes |
The maximum number of CreateServiceLevelObjective requests you can make per second in this Region. |
| Rate of DeleteGroupingConfiguration requests | Each supported Region: 10 per second |
Yes |
The maximum number of DeleteGroupingConfiguration requests you can make per second in this Region. |
| Rate of DeleteServiceLevelObjective requests | Each supported Region: 5 per second |
Yes |
The maximum number of DeleteServiceLevelObjective requests you can make per second in this Region. |
| Rate of GetService requests | Each supported Region: 10 per second |
Yes |
The maximum number of GetService requests you can make per second in this Region. |
| Rate of GetServiceLevelObjective requests | Each supported Region: 5 per second |
Yes |
The maximum number of GetServiceLevelObjective requests you can make per second in this Region. |
| Rate of ListAuditFindings requests | Each supported Region: 1 per second |
Yes |
The maximum number of ListAuditFindings requests you can make per second in this Region. |
| Rate of ListEntityEvents requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListEntityEvents requests you can make per second in this Region. |
| Rate of ListGroupingAttributeDefinitions requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListGroupingAttributeDefinitions requests you can make per second in this Region. |
| Rate of ListServiceDependencies requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListServiceDependencies requests you can make per second in this Region. |
| Rate of ListServiceDependents requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListServiceDependents requests you can make per second in this Region. |
| Rate of ListServiceLevelObjectiveExclusionWindows requests | Each supported Region: 5 per second |
Yes |
The maximum number of ListServiceLevelObjectiveExclusionWindows requests you can make per second in this Region. |
| Rate of ListServiceLevelObjectives requests | Each supported Region: 5 per second |
Yes |
The maximum number of ListServiceLevelObjectives requests you can make per second in this Region. |
| Rate of ListServiceOperations requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListServiceOperations requests you can make per second in this Region. |
| Rate of ListServiceStates requests | Each supported Region: 5 per second |
Yes |
The maximum number of ListServiceStates requests you can make per second in this Region. |
| Rate of ListServices requests | Each supported Region: 10 per second |
Yes |
The maximum number of ListServices requests you can make per second in this Region. |
| Rate of ListTagsForResource requests | Each supported Region: 5 per second |
Yes |
The maximum number of ListTagsForResource requests you can make per second in this Region. |
| Rate of PutGroupingConfiguration requests | Each supported Region: 10 per second |
Yes |
The maximum number of PutGroupingConfiguration requests you can make per second in this Region. |
| Rate of StartDiscovery requests | Each supported Region: 5 per second |
Yes |
The maximum number of StartDiscovery requests you can make per second in this Region. |
| Rate of TagResource requests | Each supported Region: 5 per second |
Yes |
The maximum number of TagResource requests you can make per second in this Region. |
| Rate of UntagResource requests | Each supported Region: 5 per second |
Yes |
The maximum number of UntagResource requests you can make per second in this Region. |
| Rate of UpdateServiceLevelObjective requests | Each supported Region: 5 per second |
Yes |
The maximum number of UpdateServiceLevelObjective requests you can make per second in this Region. |
Internet Monitor
Internet Monitor, a feature of CloudWatch Network Monitoring, helps you understand how internet issues impact your application's performance. This section provides the quotas specific to Internet Monitor, to help you to plan an effective internet performance monitoring strategy.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Days that health events are retained | Each supported Region: 400 | No | The number of days that AWS keeps information about a resolved Internet Monitor health event. |
| Monitors per account per AWS Region | Each supported Region: 50 | No | The maximum number of monitors in an account in one AWS Region. |
| Resources per monitor | Each supported Region: 50 | No | The maximum number of resources that a monitor can have. |
Network Flow Monitor
Network Flow Monitor, a feature of CloudWatch Network Monitoring, provides near real-time visibility into network performance, such as packet loss and latency, for traffic between Amazon EC2 instances, as well as traffic toward certain other AWS services. It also helps you to determine if AWS issues are causing network performance degradation for your application. This section provides the quotas for Network Flow Monitor, including limits on monitored flows, data retention, and API requests. Understanding these quotas can help you to plan an effective network flow monitoring strategy.
| Resource | Default quota | Adjustable? |
|---|---|---|
|
Scopes per account per AWS Region |
1 |
No |
|
Monitors per account per AWS Region |
20 |
Yes |
|
Local resources per monitor |
25 |
No |
|
Remote resources per monitor |
25 |
No |
Network Synthetic Monitor
Network Synthetic Monitor, a feature of CloudWatch Network Monitoring, enables you to proactively monitor your network endpoints and API operations using configurable tests. This section details the quotas for Network Synthetic Monitor, including limits on synthetic monitors, test frequency, and script execution. These quotas are important for planning your network testing strategy and maintaining reliable endpoint monitoring.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Number of monitors per account per AWS region | Each supported Region: 100 |
Yes |
The maximum number of monitors in an account in one AWS Region. |
| Number of probes per monitor | Each supported Region: 24 |
Yes |
The maximum number of probes that a monitor can have. |
| Number of probes per subnet for each monitor | Each supported Region: 4 |
Yes |
The maximum number of probes that a subnet in a monitor can have. |
CloudWatch Observability Access Manager
CloudWatch Observability Access Manager allows you to securely share CloudWatch resources across accounts. This section details the quotas for Observability Access Manager, including limits on API requests, source account links, and sinks. Understanding these quotas is essential for implementing cross-account observability effectively.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Links per sink | Each supported Region: 100,000 | No | Maximum number of links that can be attached to a sink |
| Number of links | Each supported Region: 5 | No | Maximum number of links in your account |
| Number of sinks | Each supported Region: 1 | No | Maximum number of sinks in your account |
| Rate of CreateLink requests | Each supported Region: 10 per second | No | Maximum number of CreateLink requests you can make per second, in this account in the current region |
| Rate of CreateSink requests | Each supported Region: 10 per second | No | Maximum number of CreateSink requests you can make per second, in this account in the current region |
| Rate of DeleteLink requests | Each supported Region: 10 per second | No | Maximum number of DeleteLink requests you can make per second, in this account in the current region |
| Rate of DeleteSink requests | Each supported Region: 10 per second | No | Maximum number of DeleteSink requests you can make per second, in this account in the current region |
| Rate of GetLink requests | Each supported Region: 10 per second | No | Maximum number of GetLink requests you can make per second, in this account in the current region |
| Rate of GetSink requests | Each supported Region: 10 per second | No | Maximum number of GetSink requests you can make per second, in this account in the current region |
| Rate of GetSinkPolicy requests | Each supported Region: 10 per second | No | Maximum number of GetSinkPolicy requests you can make per second, in this account in the current region |
| Rate of ListAttachedLinks requests | Each supported Region: 10 per second | No | Maximum number of ListAttachedLinks requests you can make per second, in this account in the current region |
| Rate of ListLinks requests | Each supported Region: 10 per second | No | Maximum number of ListLinks requests you can make per second, in this account in the current region |
| Rate of ListSinks requests | Each supported Region: 10 per second | No | Maximum number of ListSinks requests you can make per second, in this account in the current region |
| Rate of ListTagsForResource requests | Each supported Region: 10 per second | No | Maximum number of ListTagsForResource requests you can make per second, in this account in the current region |
| Rate of PutSinkPolicy requests | Each supported Region: 1 per second | No | Maximum number of PutSinkPolicy requests you can make per second, in this account in the current region |
| Rate of TagResource requests | Each supported Region: 10 per second | No | Maximum number of TagResource requests you can make per second, in this account in the current region |
| Rate of UntagResource requests | Each supported Region: 10 per second | No | Maximum number of UntagResource requests you can make per second, in this account in the current region |
| Rate of UpdateLink requests | Each supported Region: 10 per second | No | Maximum number of UpdateLink requests you can make per second, in this account in the current region |
CloudWatch Observability Admin
CloudWatch Observability Admin helps you discover, audit, and manage CloudWatch telemetry configurations across an AWS account or organization. It provides a consolidated view of monitoring settings for resources, enabling you to ensure consistent and proper data collection by simplifying the management of telemetry across multiple accounts. Most quotas are adjustable to accommodate enterprise-scale deployments that need higher limits for managing observability rules across large organizations.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| CreateCentralizationRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of create-centralization-rule-for-organization calls per second per account/per region |
| CreateTelemetryPipeline throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of CreateTelemetryPipeline calls per second per account and per Region |
| CreateTelemetryRule throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of create-telemetry-rule calls per second per account/per region |
| CreateTelemetryRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of create-telemetry-rule-for-organization calls per second per account/per region |
| DeleteCentralizationRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of delete-centralization-rule-for-organization calls per second per account/per region |
| DeleteTelemetryPipeline throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of DeleteTelemetryPipeline calls per second per account and per Region |
| DeleteTelemetryRule throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of delete-telemetry-rule calls per second per account/per region |
| DeleteTelemetryRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of delete-telemetry-rule-for-organization calls per second per account/per region |
| GetCentralizationRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of get-centralization-rule-for-organization calls per second per account/per region |
| GetTelemetryEnrichmentStatus throttle limit in transactions per second | Each supported Region: 5 per second |
Yes |
The maximum number of GetTelemetryEnrichmentStatus calls per second per account and per region |
| GetTelemetryPipeline throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of GetTelemetryPipeline calls per second per account and per Region |
| GetTelemetryRule throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of get-telemetry-rule calls per second per account/per region |
| GetTelemetryRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of get-telemetry-rule-for-organization calls per second per account/per region |
| GetThirdPartyTelemetryEnrichment throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of GetThirdPartyTelemetryEnrichment calls per second per account and per region |
| ListCentralizationRulesForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of list-centralization-rules-for-organization calls per second per account/per region |
| ListTagsForResource throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of list-tags-for-resource calls per second per account/per region |
| ListTelemetryPipelines throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of ListTelemetryPipelines calls per second per account and per Region |
| ListTelemetryRules throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of list-telemetry-rules calls per second per account/per region |
| ListTelemetryRulesForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of list-telemetry-rules-for-organization calls per second per account/per region |
| ListThirdPartyTelemetryEnrichments throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of ListThirdPartyTelemetryEnrichments calls per second per account and per region |
| Logs Centralization throughput per destination region | Each supported Region: 2.5 Gigabytes per second | No | The maximum organization-level throughput for centralization of logs per destination region |
| Organization Centralization Rules | Each supported Region: 50 |
Yes |
The maximum number of organization centralization rules that you can create for an organization |
| Organization Telemetry Rules | Each supported Region: 50 |
Yes |
The maximum number of organization telemetry rules that you can create for an organization |
| Pipelines for managed OTel metrics experience | Each supported Region: 300 |
Yes |
The maximum number of pipelines for managed OTel metrics experience allowed per account and per Region |
| Pipelines with a CloudWatch Logs source | Each supported Region: 300 |
Yes |
The maximum number of pipelines with a CloudWatch Logs source allowed per account per Region |
| Pipelines with a third-party integration source | Each supported Region: 30 |
Yes |
The maximum number of pipelines with a third-party integration source allowed per account per Region |
| StartTelemetryEnrichment throttle limit in transactions per second | Each supported Region: 1 per second |
Yes |
The maximum number of StartTelemetryEnrichment calls per second per account and per region |
| StartThirdPartyTelemetryEnrichment throttle limit in transactions per second | Each supported Region: 1 per second | No | The maximum number of StartThirdPartyTelemetryEnrichment calls per second per account and per region |
| StopTelemetryEnrichment throttle limit in transactions per second | Each supported Region: 1 per second |
Yes |
The maximum number of StopTelemetryEnrichment calls per second per account and per region |
| StopThirdPartyTelemetryEnrichment throttle limit in transactions per second | Each supported Region: 1 per second | No | The maximum number of StopThirdPartyTelemetryEnrichment calls per second per account and per region |
| TagResource throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of tag-resource calls per second per account/per region |
| Telemetry Rules | Each supported Region: 20 |
Yes |
The maximum number of telemetry rules that you can create for an account |
| TestTelemetryPipeline throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of TestTelemetryPipeline calls per second per account and per Region |
| Third-party telemetry enrichments | Each supported Region: 5 | No | The maximum number of third-party telemetry enrichments allowed per account per Region |
| UntagResource throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of untag-resource calls per second per account/per region |
| UpdateCentralizationRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of update-centralization-rule-for-organization calls per second per account/per region |
| UpdateTelemetryPipeline throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of UpdateTelemetryPipeline calls per second per account and per Region |
| UpdateTelemetryRule throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of update-telemetry-rule calls per second per account/per region |
| UpdateTelemetryRuleForOrganization throttle limit in transactions per second | Each supported Region: 5 | No | The maximum number of update-telemetry-rule-for-organization calls per second per account/per region |
| ValidateTelemetryPipelineConfiguration throttle limit in transactions per second | Each supported Region: 5 per second | No | The maximum number of ValidateTelemetryPipelineConfiguration calls per second per account and per Region |
CloudWatch Omni
CloudWatch Omni is a capability of Amazon CloudWatch that unifies monitoring of your applications, infrastructure, and AI agents in a single observability experience. Omni is built on open standards, uses AI to discover your services and answer questions about your telemetry, and is delivered outside the AWS Management Console. This section details the quotas for CloudWatch Omni, including limits on spaces, grants, access profiles, dashboards, alerts, concurrent queries, and API request rates.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Access profiles per space | Each supported Region: 100 | No | The maximum number of access profiles per space |
| Alerts per space | Each supported Region: 500 | No | The maximum number of alerts per space |
| Concurrent SQL queries per account per region | Each supported Region: 400 | No | The maximum number of concurrent SQL queries per account per region |
| Concurrent query sessions per account per region | Each supported Region: 250 | No | The maximum number of concurrent query sessions per account per region |
| Grants per space | Each supported Region: 500 | No | The maximum number of grants per space |
| Monthly Omni agent credits | Each supported Region: 100 | No | The maximum number of Omni agent credits per account per region per month. |
| Omni dashboards per space | Each supported Region: 200 | No | The maximum number of Omni dashboards per space |
| Omni threads per principal per space | Each supported Region: 200 | No | The maximum number of Omni threads per principal per space |
| Org-wide domain grants per domain | Each supported Region: 100 | No | The maximum number of org-wide (domain) grants per domain |
| Rate of CreateAccessGrant requests | Each supported Region: 5 | No | Creates a new rich AccessGrant with optional field filters. |
| Rate of CreateAccessProfile requests | Each supported Region: 5 | No | Creates a new Access Profile within a space. |
| Rate of CreateAlert requests | Each supported Region: 5 | No | Creates a new alert within a space. |
| Rate of CreateDomain requests | Each supported Region: 5 | No | Creates a new domain with identity provider configuration. |
| Rate of CreateDomainAccessGrantForOrganization requests | Each supported Region: 5 | No | Creates an org-scoped ADMIN grant for a principal on the organization domain. |
| Rate of CreateIntegration requests | Each supported Region: 10 | No | Creates an integration with a third-party provider. Returns the integration |
| Rate of CreateOmniDashboard requests | Each supported Region: 5 | No | Creates a new dashboard within a space. |
| Rate of CreateOneTimeDeepLinkCode requests | Each supported Region: 50 | No | Generates a one-time code for deep link authentication. |
| Rate of CreateSpace requests | Each supported Region: 5 | No | Creates a new Space within a domain. |
| Rate of CreateView requests | Each supported Region: 10 | No | Creates a new SQL view. |
| Rate of DeleteAccessGrant requests | Each supported Region: 5 | No | Removes an existing AccessGrant and its associated Cedar policy. |
| Rate of DeleteAccessProfile requests | Each supported Region: 5 | No | Removes an Access Profile. |
| Rate of DeleteAlert requests | Each supported Region: 5 | No | Deletes an alert by its identifier. |
| Rate of DeleteDomain requests | Each supported Region: 5 | No | Removes a domain and all associated resources. |
| Rate of DeleteDomainAccessGrantForOrganization requests | Each supported Region: 5 | No | Deletes an org-scoped grant. Soft-deletes the grant record. |
| Rate of DeleteDomainForOrganization requests | Each supported Region: 5 | No | Deletes an organization-scoped domain. All Spaces must be deleted first. |
| Rate of DeleteIntegration requests | Each supported Region: 10 | No | Deletes an integration. Returns the resulting status. |
| Rate of DeleteOmniDashboard requests | Each supported Region: 5 | No | Removes a dashboard from a space. |
| Rate of DeleteSpace requests | Each supported Region: 5 | No | Removes a Space and all associated resources. |
| Rate of DeleteView requests | Each supported Region: 10 | No | Deletes the specified view. |
| Rate of GetAccessGrant requests | Each supported Region: 5 | No | Retrieves the full detail of a single AccessGrant by ID. |
| Rate of GetAccessProfile requests | Each supported Region: 5 | No | Retrieves an Access Profile with its permissions and access grants. |
| Rate of GetAlert requests | Each supported Region: 25 | No | Retrieves a single alert by its identifier. |
| Rate of GetContextGraph requests | Each supported Region: 10 | No | Queries the context graph with filtering, traversal, and pagination support. |
| Rate of GetDomain requests | Each supported Region: 5 | No | Retrieves a domain by its identifier. |
| Rate of GetDomainAccessGrantForOrganization requests | Each supported Region: 5 | No | Retrieves an org-scoped grant on the organization domain. |
| Rate of GetDomainForOrganization requests | Each supported Region: 5 | No | Retrieves details of an organization-scoped domain. |
| Rate of GetIntegration requests | Each supported Region: 10 | No | Returns the details of a single integration, identified by its identifier. |
| Rate of GetIntelligenceConfiguration requests | Each supported Region: 10 | No | Retrieves the intelligence configuration for the calling account. |
| Rate of GetOmniDashboard requests | Each supported Region: 5 | No | Retrieves a dashboard by ID within a space. |
| Rate of GetSpace requests | Each supported Region: 5 | No | Retrieves details of a specific Space. |
| Rate of GetSpaceCredentialsForOrganization requests | Each supported Region: 5 | No | Vends space-scoped credentials for MA/DA in a member account. IAM_DIRECT only. |
| Rate of GetTelemetryQueryResults requests | Each supported Region: 20 | No | Returns the results for the specified query. |
| Rate of GetView requests | Each supported Region: 10 | No | Returns the definition and metadata of the specified view. |
| Rate of ListAccessGrants requests | Each supported Region: 5 | No | Returns AccessGrants within a space with optional filtering. |
| Rate of ListAccessProfiles requests | Each supported Region: 5 | No | Returns all access profiles in a space. |
| Rate of ListAlerts requests | Each supported Region: 10 | No | Lists alerts within a space, optionally filtered by exact name(s). |
| Rate of ListDomainAccessGrantsForOrganization requests | Each supported Region: 5 | No | Lists org-scoped grants for the organization domain. |
| Rate of ListDomains requests | Each supported Region: 5 | No | Returns all Domains visible to the caller. |
| Rate of ListIntegrations requests | Each supported Region: 10 | No | Lists the integrations in the account, optionally filtered by type, status. |
| Rate of ListOmniDashboards requests | Each supported Region: 5 | No | Returns dashboards within a space. |
| Rate of ListSpaces requests | Each supported Region: 5 | No | Returns all Spaces in the account. |
| Rate of ListSpacesForOrganization requests | Each supported Region: 5 | No | Lists all Spaces across all member accounts in the organization domain. |
| Rate of ListTelemetryFields requests | Each supported Region: 10 | No | Lists fields available for telemetry queries. |
| Rate of ListTelemetryQuerySessions requests | Each supported Region: 10 | No | Lists telemetry query sessions. |
| Rate of ListViews requests | Each supported Region: 10 | No | Lists the views in the callers account and region. |
| Rate of PutIntelligenceConfiguration requests | Each supported Region: 10 | No | Creates or updates the intelligence configuration for the calling account. |
| Rate of SearchPrincipals requests | Each supported Region: 50 | No | Searches Identity Center for users and groups matching a query within a domain. |
| Rate of StartTelemetryQuery requests | Each supported Region: 10 | No | Starts a telemetry query within a session. |
| Rate of StartTelemetryQuerySession requests | Each supported Region: 10 | No | Starts a new telemetry query session. |
| Rate of StopTelemetryQuery requests | Each supported Region: 10 | No | Stops a running telemetry query. |
| Rate of StopTelemetryQuerySession requests | Each supported Region: 10 | No | Stops a telemetry query session. |
| Rate of UpdateAccessProfile requests | Each supported Region: 5 | No | Updates the name and/or description of an Access Profile. |
| Rate of UpdateAlert requests | Each supported Region: 5 | No | Updates an existing alert. |
| Rate of UpdateDomain requests | Each supported Region: 5 | No | Updates a domains authentication provider configuration. |
| Rate of UpdateDomainForOrganization requests | Each supported Region: 5 | No | Updates an organization-scoped domain. Must target the domains home region. |
| Rate of UpdateIntegration requests | Each supported Region: 10 | No | Updates an existing integration, identified by its id, ARN, or name. |
| Rate of UpdateOmniDashboard requests | Each supported Region: 5 | No | Updates an existing dashboard within a space. |
| Rate of UpdateSpace requests | Each supported Region: 5 | No | Updates an existing Space within a domain. |
| Rate of UpdateView requests | Each supported Region: 10 | No | Updates an existing views definition and/or description. |
CloudWatch RUM
CloudWatch RUM (Real-User Monitoring) helps you collect and analyze performance data from real user interactions with your web applications. This section presents the quotas for CloudWatch RUM, allowing you to plan your real-user monitoring strategy within the service limits.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| RUM AppMonitors | Each supported Region: 50 |
Yes |
The maximum number of RUM AppMonitors that you can have in this AWS account. |
| RUM Events per second per AWS Account | Each supported Region: 50 |
Yes |
The maximum number of RUM Events per second that RUM will ingest for this AWS account. |
Managing your CloudWatch service quotas
Effective management of CloudWatch service quotas is crucial for maintaining optimal performance and avoiding service disruptions. This section provides guidance on viewing your current quota usage, requesting quota increases when necessary, and best practices for working within CloudWatch service limits.
CloudWatch quotas are integrated with Service Quotas, an AWS service that enables you to view and manage your quotas from a central location. For more information, see What Is Service Quotas? in the Service Quotas User Guide.
