CloudWatch service quotas - Amazon CloudWatch

CloudWatch service quotas

Amazon CloudWatch provides monitoring and observability for your AWS resources and applications. To ensure optimal performance and prevent abuse, CloudWatch imposes service quotas on various aspects of its functionality. This chapter outlines the key quotas for CloudWatch services, including metrics, alarms, API requests, and notifications. Understanding these quotas is crucial for effectively planning and managing your CloudWatch usage.

Note

For some AWS services including CloudWatch, you can use the CloudWatch usage metrics to visualize your current service usage on CloudWatch graphs and dashboards. You can use a CloudWatch metric math function to display the service quotas for those resources on your graphs. You can also configure alarms that alert you when your usage approaches a service quota. For more information, see Visualizing your service quotas and setting alarms.

CloudWatch

This section details the service quotas specifically for core CloudWatch functionality. These quotas cover aspects such as metrics, alarms, API requests, and dashboards. Familiarizing yourself with these limits helps you optimize your CloudWatch configuration and avoid potential throttling or service disruptions.

Name Default Adjustable Description
Canary limit

us-east-1: 300

ap-northeast-1: 300

Each of the other supported Regions: 500

Yes The maximum number of canaries per account per region.
Minimum frequency Each supported Region: 60,000 Milliseconds No The minimum time, in milliseconds, between runs of the same canary.
Number of Contributor Insights rules Each supported Region: 100 Yes The maximum number of Contributor Insights rules you can have in this account.
Number of Metrics Insights alarms Each supported Region: 200 No The maximum number of Metrics Insights alarms that you can have in this account in the current region.
Rate of ANOMALY_DETECTION_BAND usage in GetMetricData Each supported Region: 1,000 No The maximum number of times the ANOMALY_DETECTION_BAND function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of DB_PERF_INSIGHTS usage in GetMetricData Each supported Region: 4 No The maximum number of times the DB_PERF_INSIGHTS function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of DeleteAlarms requests Each supported Region: 3 per second No The maximum number of DeleteAlarms requests that you can make, per second, in this account in the current region.
Rate of DeleteDashboards requests Each supported Region: 10 per second Yes The maximum number of DeleteDashboards requests that you can make, per second, in this account in the current region.
Rate of DeleteInsightRules requests Each supported Region: 5 per second No The maximum number of DeleteInsightRules requests you can make per second in this account.
Rate of DeleteMetricStream requests Each supported Region: 10 per second Yes The maximum number of DeleteMetricStream requests that you can make, per second, in this account in the current region.
Rate of DescribeAlarmHistory requests Each supported Region: 20 per second No The maximum number of DescribeAlarmHistory requests that you can make, per second, in this account in the current region.
Rate of DescribeAlarms requests Each supported Region: 9 per second Yes The maximum number of DescribeAlarms requests that you can make, per second, in this account in the current region.
Rate of DescribeAlarmsForMetric requests Each supported Region: 9 per second No The maximum number of DescribeAlarmsForMetric requests that you can make, per second, in this account in the current region.
Rate of DescribeInsightRules requests Each supported Region: 20 per second No The maximum number of DescribeInsightRules requests you can make per second in this account.
Rate of DisableAlarmActions requests Each supported Region: 3 per second No The maximum number of DisableAlarmActions requests that you can make, per second, in this account in the current region.
Rate of DisableInsightRules requests Each supported Region: 1 per second No The maximum number of DisableInsightRules requests you can make per second in this account.
Rate of EnableAlarmActions requests Each supported Region: 3 per second No The maximum number of EnableAlarmActions requests that you can make, per second, in this account in the current region.
Rate of EnableInsightRules requests Each supported Region: 1 per second No The maximum number of EnableInsightRules requests you can make per second in this account.
Rate of GetDashboard requests Each supported Region: 10 per second Yes The maximum number of GetDashboard requests that you can make, per second, in this account in the current region.
Rate of GetInsightRuleReport requests Each supported Region: 20 per second Yes The maximum number of GetInsightRuleReport requests you can make, per second in this account.
Rate of GetMetricData datapoints for metrics older than three hours Each supported Region: 396,000 No The maximum number of GetMetricData datapoints that you can fetch, per second, for a request with a StartTime of more than three hours in this account in the current region.
Rate of GetMetricData datapoints for the last three hours of metrics Each supported Region: 180,000 No The maximum number of GetMetricData datapoints that you can fetch, per second, for a request with a StartTime of less than or equal to three hours in this account in the current region.
Rate of GetMetricData datapoints using Metrics Insights Each supported Region: 4,300,000 No The maximum number of GetMetricData datapoints that you can fetch using Metrics Insights, per second, for a request with a StartTime of less than or equal to three hours in this account in the current region.
Rate of GetMetricData requests Each supported Region: 50 per second Yes The maximum number of GetMetricData requests that you can make, per second, in this account in the current region.
Rate of GetMetricStatistics requests Each supported Region: 400 per second Yes The maximum number of GetMetricStatistics requests that you can make, per second, in this account in the current region.
Rate of GetMetricStream requests Each supported Region: 10 per second Yes The maximum number of GetMetricStream requests that you can make, per second, in this account in the current region.
Rate of GetMetricWidgetImage requests Each supported Region: 20 per second Yes The maximum number of GetMetricWidgetImage requests that you can make, per second, in this account in the current region.
Rate of INSIGHT_RULE_METRIC usage in GetMetricData Each supported Region: 20 No The maximum number of times the INSIGHT_RULE_METRIC function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of LAMBDA usage in GetMetricData Each supported Region: 5 No The maximum number of times the LAMBDA function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of ListDashboards requests Each supported Region: 10 per second Yes The maximum number of ListDashboards requests that you can make, per second, in this account in the current region.
Rate of ListMetricStreams requests Each supported Region: 10 per second Yes The maximum number of ListMetricStreams requests that you can make, per second, in this account in the current region.
Rate of ListMetrics requests Each supported Region: 25 per second Yes The maximum number of ListMetrics requests that you can make, per second, in this account in the current region.
Rate of ListTagsForResource requests Each supported Region: 10 per second No The maximum number of ListTagsForResource requests that you can make, per second, in this account in the current region.
Rate of Metrics Insights usage in GetMetricData Each supported Region: 10 No The maximum number of times Metrics Insights can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of PutCompositeAlarm requests Each supported Region: 3 per second Yes The maximum number of PutCompositeAlarm requests that you can make, per second, in this account in the current region.
Rate of PutDashboard requests Each supported Region: 10 per second Yes The maximum number of PutDashboard requests that you can make, per second, in this account in the current region.
Rate of PutInsightRule requests Each supported Region: 5 per second No The maximum number of PutInsightRule requests you can make, per second in this account.
Rate of PutMetricAlarm requests Each supported Region: 3 per second Yes The maximum number of PutMetricAlarm requests that you can make, per second, in this account in the current region.
Rate of PutMetricData requests Each supported Region: 500 per second Yes The maximum number of PutMetricData requests that you can make, per second, in this account in the current region.
Rate of PutMetricStream requests Each supported Region: 10 per second Yes The maximum number of PutMetricStream requests that you can make, per second, in this account in the current region.
Rate of SEARCH usage in GetMetricData Each supported Region: 50 No The maximum number of times the SEARCH function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of SERVICE_QUOTA usage in GetMetricData Each supported Region: 1,000 No The maximum number of times the SERVICE_QUOTA function can be used in all GetMetricData requests, per second, in this account in the current region.
Rate of SetAlarmState requests Each supported Region: 3 per second No The maximum number of SetAlarmState requests that you can make, per second, in this account in the current region.
Rate of StartMetricStreams requests Each supported Region: 10 per second Yes The maximum number of StartMetricStreams requests that you can make, per second, in this account in the current region.
Rate of StopMetricStreams requests Each supported Region: 10 per second Yes The maximum number of StopMetricStreams requests that you can make, per second, in this account in the current region.
Rate of TagResource requests Each supported Region: 20 per second No The maximum number of TagResource requests that you can make, per second, in this account in the current region.
Rate of UntagResource requests Each supported Region: 20 per second No The maximum number of UntagResource requests that you can make, per second, in this account in the current region.

CloudWatch investigations (Amazon AI Operations)

CloudWatch investigations (Amazon AI Operations) enables intelligent problem detection and root cause analysis. This section outlines the quotas related to concurrent investigations, investigation groups, and AI-assisted analyses.

Name Default Adjustable Description
Concurrent active investigations Each supported Region: 2 No The maximum number of concurrent investigations with active AI analysis per account per region.
Investigation groups Each supported Region: 1 No The maximum number of investigation groups that can be created per account in a region.
Monthly investigations Each supported Region: 150 No The maximum number of AI-assisted investigations per month in this account in the current region.

CloudWatch Application Insights

CloudWatch Application Insights helps you monitor your applications and troubleshoot issues quickly. This section presents the quotas for CloudWatch Application Insights, including limits on API requests, applications, log streams, and metrics. Knowing these quotas allows you to effectively plan your application monitoring setup.

Resource Default quota Adjustable

API requests

All API actions are throttled to 5 TPS

No

Resource Group applications

100 per account

No

Account applications

1 per account

No

Log Streams

5 per resource

No

Observations per problem

20 per dashboard

40 per DescribeProblemObservations action

No

Metrics

60 per resource

No

CloudWatch Application Signals

CloudWatch Application Signals provides deep insights into your application's performance and dependencies. This section covers the quotas for Application Signals, including API request limits and service-level objective (SLO) constraints. Understanding these quotas is crucial for implementing effective application performance monitoring.

Name Default Adjustable Description
Number of SLOs per Region Each supported Region: 250 Yes The maximum number of SLOs that you can have in this account in the current region.
Number of SLOs per Service Each supported Region: 100 Yes The maximum number of SLOs that you can have per service in the current region.
Rate of BatchGetServiceLevelObjectiveBudgetReport requests Each supported Region: 10 per second Yes The maximum number of BatchGetServiceLevelObjectiveBudgetReport requests you can make per second in this Region.
Rate of BatchUpdateExclusionWindows requests Each supported Region: 5 per second Yes The maximum number of BatchUpdateExclusionWindows requests you can make per second in this Region.
Rate of CreateServiceLevelObjective requests Each supported Region: 5 per second Yes The maximum number of CreateServiceLevelObjective requests you can make per second in this Region.
Rate of DeleteServiceLevelObjective requests Each supported Region: 5 per second Yes The maximum number of DeleteServiceLevelObjective requests you can make per second in this Region.
Rate of GetService requests Each supported Region: 10 per second Yes The maximum number of GetService requests you can make per second in this Region.
Rate of GetServiceLevelObjective requests Each supported Region: 5 per second Yes The maximum number of GetServiceLevelObjective requests you can make per second in this Region.
Rate of ListServiceDependencies requests Each supported Region: 10 per second Yes The maximum number of ListServiceDependencies requests you can make per second in this Region.
Rate of ListServiceDependents requests Each supported Region: 10 per second Yes The maximum number of ListServiceDependents requests you can make per second in this Region.
Rate of ListServiceLevelObjectiveExclusionWindows requests Each supported Region: 5 per second Yes The maximum number of ListServiceLevelObjectiveExclusionWindows requests you can make per second in this Region.
Rate of ListServiceLevelObjectives requests Each supported Region: 5 per second Yes The maximum number of ListServiceLevelObjectives requests you can make per second in this Region.
Rate of ListServiceOperations requests Each supported Region: 10 per second Yes The maximum number of ListServiceOperations requests you can make per second in this Region.
Rate of ListServices requests Each supported Region: 10 per second Yes The maximum number of ListServices requests you can make per second in this Region.
Rate of ListTagsForResource requests Each supported Region: 5 per second Yes The maximum number of ListTagsForResource requests you can make per second in this Region.
Rate of StartDiscovery requests Each supported Region: 5 per second Yes The maximum number of StartDiscovery requests you can make per second in this Region.
Rate of TagResource requests Each supported Region: 5 per second Yes The maximum number of TagResource requests you can make per second in this Region.
Rate of UntagResource requests Each supported Region: 5 per second Yes The maximum number of UntagResource requests you can make per second in this Region.
Rate of UpdateServiceLevelObjective requests Each supported Region: 5 per second Yes The maximum number of UpdateServiceLevelObjective requests you can make per second in this Region.

CloudWatch Internet Monitor

Internet Monitor helps you understand how internet issues impact your application's performance. This section outlines the quotas specific to Internet Monitor, enabling you to plan your internet performance monitoring strategy effectively.

Name Default Adjustable Description
Days that health events are retained Each supported Region: 400 No The number of days that AWS keeps information about a resolved Internet Monitor health event.
Monitors per account per AWS Region Each supported Region: 50 No The maximum number of monitors in an account in one AWS Region.
Resources per monitor Each supported Region: 50 No The maximum number of resources that a monitor can have.

CloudWatch Network Flow Monitor

Network Flow Monitor helps you analyze VPC flow logs and network traffic patterns in real time. This section outlines the quotas for Network Flow Monitor, including limits on monitored flows, data retention, and API requests. Understanding these quotas helps you plan your network monitoring capacity and configure your flow monitoring effectively.

Resource Default quota Adjustable?

Scopes per account per AWS Region

1

No

Monitors per account per AWS Region

50

Yes

Local resources per monitor

25

No

Remote resources per monitor

25

No

CloudWatch Network Synthetic Monitor

CloudWatch Network Synthetic Monitor enables you to proactively monitor your network endpoints and API operations using configurable tests. This section details the quotas for Network Synthetic Monitor, including limits on synthetic monitors, test frequency, and script execution. These quotas are important for planning your network testing strategy and maintaining reliable endpoint monitoring.

Name Default Adjustable Description
Number of monitors per account per AWS region Each supported Region: 100 Yes The maximum number of monitors in an account in one AWS Region.
Number of probes per monitor Each supported Region: 24 Yes The maximum number of probes that a monitor can have.
Number of probes per subnet for each monitor Each supported Region: 4 Yes The maximum number of probes that a subnet in a monitor can have.

CloudWatch Observability Access Manager

CloudWatch Observability Access Manager allows you to securely share CloudWatch resources across accounts. This section details the quotas for Observability Access Manager, including limits on API requests, source account links, and sinks. Understanding these quotas is essential for implementing cross-account observability effectively.

Name Default Adjustable Description
Links per sink Each supported Region: 100,000 No Maximum number of links that can be attached to a sink
Number of links Each supported Region: 5 No Maximum number of links in your account
Number of sinks Each supported Region: 1 No Maximum number of sinks in your account
Rate of CreateLink requests Each supported Region: 10 per second No Maximum number of CreateLink requests you can make per second, in this account in the current region
Rate of CreateSink requests Each supported Region: 10 per second No Maximum number of CreateSink requests you can make per second, in this account in the current region
Rate of DeleteLink requests Each supported Region: 10 per second No Maximum number of DeleteLink requests you can make per second, in this account in the current region
Rate of DeleteSink requests Each supported Region: 10 per second No Maximum number of DeleteSink requests you can make per second, in this account in the current region
Rate of GetLink requests Each supported Region: 10 per second No Maximum number of GetLink requests you can make per second, in this account in the current region
Rate of GetSink requests Each supported Region: 10 per second No Maximum number of GetSink requests you can make per second, in this account in the current region
Rate of GetSinkPolicy requests Each supported Region: 10 per second No Maximum number of GetSinkPolicy requests you can make per second, in this account in the current region
Rate of ListAttachedLinks requests Each supported Region: 10 per second No Maximum number of ListAttachedLinks requests you can make per second, in this account in the current region
Rate of ListLinks requests Each supported Region: 10 per second No Maximum number of ListLinks requests you can make per second, in this account in the current region
Rate of ListSinks requests Each supported Region: 10 per second No Maximum number of ListSinks requests you can make per second, in this account in the current region
Rate of ListTagsForResource requests Each supported Region: 10 per second No Maximum number of ListTagsForResource requests you can make per second, in this account in the current region
Rate of PutSinkPolicy requests Each supported Region: 1 per second No Maximum number of PutSinkPolicy requests you can make per second, in this account in the current region
Rate of TagResource requests Each supported Region: 10 per second No Maximum number of TagResource requests you can make per second, in this account in the current region
Rate of UntagResource requests Each supported Region: 10 per second No Maximum number of UntagResource requests you can make per second, in this account in the current region
Rate of UpdateLink requests Each supported Region: 10 per second No Maximum number of UpdateLink requests you can make per second, in this account in the current region

CloudWatch RUM

CloudWatch RUM (Real-User Monitoring) helps you collect and analyze performance data from real user interactions with your web applications. This section presents the quotas for CloudWatch RUM, allowing you to plan your real-user monitoring strategy within the service limits.

Name Default Adjustable Description
RUM AppMonitors Each supported Region: 20 Yes The maximum number of RUM AppMonitors that you can have in this AWS account.
RUM Events per second per AWS Account Each supported Region: 50 Yes The maximum number of RUM Events per second that RUM will ingest for this AWS account.

Managing your CloudWatch service quotas

Effective management of CloudWatch service quotas is crucial for maintaining optimal performance and avoiding service disruptions. This section provides guidance on viewing your current quota usage, requesting quota increases when necessary, and best practices for working within CloudWatch service limits.

CloudWatch quotas are integrated with Service Quotas, an AWS service that enables you to view and manage your quotas from a central location. For more information, see What Is Service Quotas? in the Service Quotas User Guide.

AWS Management Console
To view CloudWatch service quotas using the console
  1. Open the Service Quotas console at https://console.aws.amazon.com/servicequotas/.

  2. In the navigation pane, choose AWS services.

  3. From the AWS services list, search for and select the CloudWatch service whose quotas you want to view.

    In the Service quotas list, you can see the service quota name, applied value (if it is available), AWS default quota, and whether the quota value is adjustable.

  4. To view additional information about a service quota, such as the description, choose the quota name.

  5. (Optional) To request a quota increase, select the quota that you want to increase, select Request quota increase, enter or select the required information, and select Request.

To work more with service quotas using the console see the Service Quotas User Guide. To learn more about quota increases, see Requesting a quota increase in the Service Quotas User Guide.

AWS CLI
To view CloudWatch service quotas using the AWS CLI
  1. Run the following command to view the default CloudWatch quotas.

    aws service-quotas list-aws-default-service-quotas \ --query 'Quotas[*].{Adjustable:Adjustable,Name:QuotaName,Value:Value,Code:QuotaCode}' \ --service-code ServiceCode --output table
    Note

    The following list contains the CloudWatch ServiceCode values:

    • To see the CloudWatch quotas, use --service-code monitoring.

    • To see the Amazon AI Operations quotas, use --service-code aiops.

    • To see the CloudWatch Application Signals quotas, use --service-code application-signals.

    • To see the Amazon CloudWatch Internet Monitor quotas, use --service-code internetmonitor.

    • To see the CloudWatch Network Monitor quotas, use --service-code networkmonitor.

    • To see the CloudWatch Observability Access Manager quotas, use --service-code oam.

    • To see the CloudWatch RUM (Real-User Monitoring) quotas, use --service-code rum.

  2. (Optional) Request a quota increase for a CloudWatch service:

    1. Identify the quota code for the quota you want to increase.

      aws service-quotas list-service-quotas --service-code ServiceCode
    2. Note the QuotaCode value for the item. For example if you wanted to increase your quota for the Rate of PutCompositeAlarm requests that are supported by CloudWatch for your account, you would record the QuotaCode L-8742A250.

    3. Type the following command using the identified ServiceCode and QuotaCode values and providing the numeric value for the desired new quota:

    aws service-quotas request-service-quota-increase \ --service-code ServiceCode \ --quota-code QuotaCode \ --desired-value new-quota-value

    For more details about quota increases, see the request-service-quota-increase command in the AWS CLI Command Reference.

    To work more with service quotas using the AWS CLI, see the Service Quotas AWS CLI Command Reference.