Quotas

Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account.

Quotas for AWS services in this solution

Make sure you have sufficient quota for each of the services implemented in this solution. For more information, refer to AWS service quotas.

Select one of the following links to go to the page for that service. To see the service quotas for all AWS services in the documentation without switching pages, view the information in the Service endpoints and quotas page in the AWS General Reference guide PDF instead.

Transit Gateway	AWS X-Ray
Lambda	Amazon SNS
Step Functions	Amazon Cognito
DynamoDB	AWS AppSync
EventBridge	Amazon S3
AWS WAF	CloudFront

CloudFormation quotas

Your AWS account has CloudFormation quotas that you must be aware of when launching the stacks for this solution. By understanding these quotas, you can avoid limitation errors that can prevent you from deploying this solution successfully. For more information, refer to AWS CloudFormation quotas in the AWS CloudFormation Users Guide.

Lambda quotas

In the hub account, the state machine invokes Lambda functions to run the scan in parallel depending on the VPCs and subnets tagged across multiple accounts in your organization. Review and increase your Lambda invocation limit to avoid throttling.

Transit Gateway quotas

The solution creates a new transit gateway for each hub stack deployment unless you provide an existing transit gateway in the hub template parameter (Optional) Do you wish to use an existing transit gateway? If yes, you must provide the transit gateway id below. Your account has a default Transit Gateway quota of five.

AWS Transit Gateway Network Manager quotas

The solution creates a new global network for each hub stack deployment unless you provide an existing global network ID in the hub template parameter (Optional) Do you wish to use an existing global network? If yes, you must provide the global network id below. Your account has default global network quota of five. Only one global network is recommended for all the other deployments in different AWS Regions in the hub account. Provide the global network ID created by the first deployment in the other deployments in different AWS Regions.