# Service Quotas Automatic Management Automatic Management Service Quotas Automatic Management monitors your service quotas usage and notifies you before you run out of your allocated quotas. You gain better visibility and proactive awareness, enabling you to run your applications without interruptions.Key features of Automatic Management **Opt-in options** Enable Automatic Management using the Service Quotas console, AWS CLI, or API. **Usage notifications** Receive notifications when quota usage reaches the following utilization thresholds: + 80% utilization + 95% utilization **Auto-Adjust** Automatic Management can make a service quota increase request on your behalf with Notify and Auto-Adjust mode. **Notification channels** Configure notifications through multiple channels: + AWS Console Mobile Application + Email + Slack **Integration options** + Subscribe to [Amazon EventBridge events](eventbridge-integration.md) for automation workflows + View notifications in the [AWS Health](https://docs.aws.amazon.com/health/latest/ug/what-is-aws-health.html) dashboard **Topics** + [ ## Service Quotas Automatic Management modes ](#automatic-management-modes) + [ ## Service Quotas Automatic Management permissions ](#permissions) + [ # Getting started with Service Quotas Automatic Management ](getting-started-auto-mgmt.md) + [ # Viewing Service Quotas Automatic Management configuration ](viewing-automatic-management.md) + [ # Updating Service Quotas Automatic Management configuration ](updating-automatic-management.md) + [ # Excluding service quotas from Service Quotas Automatic Management ](excluding-quotas.md) + [ # Stopping Service Quotas Automatic Management ](stopping-automatic-management.md) + [ # Service Quotas Automatic Management frequently asked questions ](automatic-management-faq.md) ## Service Quotas Automatic Management modes There are two modes with Automatic Management: Notify and Auto-Adjust and Notify Only. Both modes send you notifications about supported service quotas usage to the [AWS Health dashboard](https://docs.aws.amazon.com/health/latest/ug/aws-health-dashboard-status.html). The following table highlights different features for each mode. | Mode | Creates service quota increase request when service usage exceeds 80% of utilization threshold | Creates service quota increase request when service usage exceeds 95% of utilization threshold | Sends notifications when your service increase request fails | Monitors service quotas usage and sends notifications when approaching 80% service utilization threshold | Monitors service quotas usage and sends notifications when approaching 95% service utilization thresholds | | --- | --- | --- | --- | --- | --- | | Notify and Auto Adjust | Yes | Yes | Yes | No | Yes | | Notify Only | No | No | No | Yes | Yes | ### How service quota increase requests work with Notify and Auto-Adjust mode Automatic Management monitors your service usage and sends these metrics to CloudWatch. When your usage for [adjustable services quotas](intro.md#intro_getting-started) are greater than the [utilization threshold](#notification-thresholds), Automatic Management generates a service quota increase for that quota. #### Auto-adjust vs manual quota increase requests Auto-adjust requests are processed differently than manual quota increase requests: Auto-adjust requests + Use automated processing without creating a support case + Only work for quotas that support automated approval + May have more restrictive approval criteria + Do not provide detailed rejection reasons when not approved Manual requests + Go through AWS Support with human review + Can consider additional context and account-specific factors + Provide detailed feedback through the support case process + May be approved even when auto-adjust requests for the same quota are not **Important** Auto-adjustable status does not guarantee approval. If an auto-adjust request is not approved, you should submit a manual quota increase request through the Service Quotas console or API. ## Service Quotas Automatic Management permissions To start Automatic Management, you'll need permissions to view AWS Health notifications and use the Service Quotas console, AWS CLI, or API actions. **Permissions to use Automatic Management** + You should use the following AWS Managed Policies for Automatic Management. + [https://docs.aws.amazon.com/servicequotas/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-POLICYNAME](https://docs.aws.amazon.com/servicequotas/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-POLICYNAME) + [https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess](https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess) **Permissions to view Automatic Management** + [https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess](https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess) For more information on creating IAM policies, see the following links. + [IAM tutorial: Create and attach your first customer managed policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_managed-policies.html) in the *AWS Identity and Access Management User Guide* + [Define custom IAM permissions with customer managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) in the *AWS Identity and Access Management User Guide* + [Create IAM policies (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html) in the *AWS Identity and Access Management User Guide* # Getting started with Service Quotas Automatic Management Getting started Service Quotas Automatic Management monitors service quotas usage patterns and sends you notifications when your usage approaches your [utilization thresholds](automatic-management.md#notification-thresholds). Automatic Management works with both adjustable and non-adjustable quotas to help you track your quota utilization. To allow AWS to monitor quotas in your AWS account, you need to start the Automatic Management. The following procedures walks through how you can start Automatic Management with either the AWS Management Console or AWS CLI. **Supported quotas** Not all service quotas support Automatic Management. Only quotas that have usage metrics available can be monitored. Automatic Management monitors both adjustable and non-adjustable quotas. However, only a subset of adjustable quotas support auto-adjustment. To view which quotas are supported in your account, navigate to the Automatic Management section in the Service Quotas console, which displays only the quotas that support Automatic Management in your account and region. ------ #### [ AWS Management Console ] Use the following steps to start Automatic Management using the AWS Management Console. 1. Open the Service Quotas console at [https://console.aws.amazon.com/servicequotas/](https://console.aws.amazon.com/servicequotas/). 1. In the navigation pane, select **Automatic Management**. 1. Alternatively, in the Service Quotas dashboard, under **Automatic Management**, select **Start**. **Important** This starts Automatic Management for all available Service Quotas and only sends notifications to the Health Dashboard. 1. Under **Automatic Management Mode**, Select **Notify Only**. There are two modes: Notify Only and Notify and Auto-Adjust. To learn more, see [Service Quotas Automatic Management modes](automatic-management.md#automatic-management-modes).. **Note** Automatic Management monitors all the monitored service quotas and sends notifications to Health Dashboard. Optionally, you can send notifications to your preferred channels in the next steps. Otherwise, choose **Skip to Review and Confirm** to continue. 1. (Optional) You can enable **User Notification Service** to receive notifications on your preferred channel like email, app, or chat channels. Select your preferred notification method and then choose **Next**. 1. (Optional) You can select exceptions for service quotas you do not want AWS to monitor and notify you about in your AWS account. Select your preferred exceptions and then choose **Next**. 1. Review your options on the **Review and Confirm** page. Make any edits and choose **Submit**. 1. Confirm your selection in the confirmation pop-up box. ------ #### [ AWS CLI ] Using Automatic Management with the AWS CLI requires you to provide Service Quotas with the necessary permission to create a AWS Support case on your behalf. You can provide this permission by attaching the AWS managed policy [`ServiceQuotasFullAccess`](security-iam-awsmanpol.md#security-iam-awsmanpol-POLICYNAME) to your IAM principal. **Example Start Automatic Management for your account** The following example starts Automatic Management for an AWS account in Canada (Central) AWS Region. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas start-auto-management \ --opt-in-level ACCOUNT \ --opt-in-type NotifyOnly \ --region ca-central-1 ``` Automatic Management supports adding your [User Notification (UNO)](https://docs.aws.amazon.com/notifications/latest/userguide/what-is-service.html) to receive notifications in your preferred channels like app, chat, or email. To add UNO configuration, provide your UNO ARN configuration with the parameter `--notification-arn`. **Example Start Automatic Management with UNO configuration** The following example starts Automatic Management for a UNO ARN in an AWS account in the Canada (Central) AWS Region. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas start-auto-management \ --opt-in-level ACCOUNT \ --opt-in-type NotifyOnly \ --region ca-central-1 \ --notification-arn arn:aws:notifications::111122223333:configuration/abc123def456gh789 ``` ------ # Viewing Service Quotas Automatic Management configuration Viewing Automatic Management configuration Use the following procedure to view Service Quotas Automatic Management configurations for your AWS account using the AWS Management Console or AWS CLI. ------ #### [ AWS Management Console ] 1. Open the Service Quotas console at [https://console.aws.amazon.com/servicequotas/](https://console.aws.amazon.com/servicequotas/). 1. In the navigation pane, choose **Automatic Management**. 1. You can edit your notification configurations, [add exceptions for AWS services you don't want to monitor with Automatic Management](excluding-quotas.md) or [stop Automatic Management](stopping-automatic-management.md). ------ #### [ AWS CLI ] Use the following command to view your Automatic Management configuration. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas get-auto-management-configuration --region ca-central-1 ``` **Example response** ``` { "OptInLevel": "ACCOUNT", "OptInType": "NotifyAndAdjust", "OptInStatus": "ENABLED", "NotificationArn": "arn:aws:notifications::111122223333:configuration/abc123def456gh789" "ExclusionList": { "dynamodb": [{ "QuotaCode": "L-E123ABC4", "QuotaName": "Maximum number of tables" }] }} ``` ------ # Updating Service Quotas Automatic Management configuration Updating Automatic Management configuration You can update your Service Quotas Automatic Management by adding service quotas to the exclusion list or changing your Automatic Management notification configuration. Use the following procedure to update Automatic Management configuration for your AWS account using the AWS Management Console or AWS CLI. ------ #### [ AWS Management Console ] 1. Open the Service Quotas console at [https://console.aws.amazon.com/servicequotas/](https://console.aws.amazon.com/servicequotas/). 1. In the navigation pane, choose **Automatic Management**. 1. Make the changes to your Automatic Management configuration. 1. **Exclusion list update** - you can add service quotas from the exclusion list. See [Excluding service quotas from Service Quotas Automatic Management](excluding-quotas.md). 1. **Notification configuration update** - Under **Notification configuration**, choose **Edit**. You're directed to the AWS User Notifications console where you can edit the notifications for Automatic Management. For more information, see [Creating your first notification configuration in AWS User Notifications](https://docs.aws.amazon.com/notifications/latest/userguide/getting-started.html) in the *AWS User Notifications User Guide*. ------ #### [ AWS CLI ] To update Automatic Management notifications with the AWS CLI, use the AWS User Notifications command, [update-notification-configuration](https://docs.aws.amazon.com/cli/latest/reference/notifications/update-notification-configuration.html) or [UpdateNotificationConfiguration](https://docs.aws.amazon.com/notifications/latest/APIReference/API_UpdateNotificationConfiguration.html) in the *AWS User Notifications API Reference*. **Example Exclude Amazon DynamoDB quota from Automatic Management** The following example excludes DynamoDB from Automatic Management for an AWS account in the Canada (Central) AWS Region. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas update-auto-management \ --opt-in-type NotifyOnly \ --region ca-central-1 \ --exclusion-list '{"dynamodb":["L-E123ABC4"]}' ``` ------ # Excluding service quotas from Service Quotas Automatic Management Excluding quotas from Automatic Management You won't be notified of service quotas utilizations for AWS services added to the Automatic Management exclusion list. You can exclude a service quota or list of quotas from being monitored by Automatic Management using the `--exclusion-list`. You'll need the service code and quota code to exclude the quota from Automatic Management in the AWS CLI. Use the following procedure to exclude quotas from Automatic Management monitoring for your AWS account using either the AWS Management Console or AWS CLI. ------ #### [ AWS Management Console ] 1. Open the Service Quotas console at [https://console.aws.amazon.com/servicequotas/](https://console.aws.amazon.com/servicequotas/). 1. In the navigation pane, select **Automatic Management**. 1. Under **Selected quotas for exceptions**, add the AWS services you do not want monitored with Automatic Management. After making your selection, choose **Add exceptions**. ------ #### [ AWS CLI ] See the following AWS CLI examples for adding supported AWS services to the Automatic Management exclusion list. You'll need to include the AWS service code and Service Quotas code in your commands. + **Finding supported AWS services code** + Use [ListServices](https://docs.aws.amazon.com//servicequotas/2019-06-24/apireference/API_ListServices.html) to list AWS services supported by Service Quotas. The response includes the `ServiceCode` and `ServiceName` for each service. For example, the `ServiceCode` for Amazon DynamoDB is `dynamodb`. + **Finding Service Quotas codes** + Use [ListServiceQuotas](https://docs.aws.amazon.com/servicequotas/2019-06-24/apireference/API_ListServiceQuotas.html) to list AWS services Service Quotas codes. You can specify the service with the request parameter `ServiceCode`. The response includes the `QuotaName`, `QuotaCode`, `Value`, and `QuotaAppliedAtLevel`. **Example Starts Automatic Management and excludes Amazon DynamoDB quota** The following example both starts Automatic Management and excludes DynamoDB as a service quota that will not be monitored with Automatic Management. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas start-auto-management \ --opt-in-level ACCOUNT \ --opt-in-type NotifyOnly \ --region ca-central-1 \ --exclusion-list '{"dynamodb":["L-E123ABC4"]}' ``` **Example Exclude Amazon DynamoDB quota from Automatic Management** The following example excludes DynamoDB from Automatic Management for an AWS account in the Canada (Central) AWS Region. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas update-auto-management \ --opt-in-type NotifyOnly \ --region ca-central-1 \ --exclusion-list '{"dynamodb":["L-E123ABC4"]}' ``` ------ # Stopping Service Quotas Automatic Management Stopping Automatic Management Use the following procedure to stop Service Quotas Automatic Management of service quotas for supported AWS services in your AWS account using the AWS Management Console or AWS CLI. ------ #### [ AWS Management Console ] 1. Open the Service Quotas console at [https://console.aws.amazon.com/servicequotas/](https://console.aws.amazon.com/servicequotas/). 1. In the navigation pane, choose **Automatic Management**. 1. Choose **Stop Automatic Management** at the top corner of the page. 1. Confirm your selection in the confirmation pop-up box. ------ #### [ AWS CLI ] Use the following command to stop Automatic Management. Replace the *italicized placeholder text* in the example command with your information. ``` aws service-quotas stop-auto-management-configuration --region ca-central-1 ``` ------ # Service Quotas Automatic Management frequently asked questions FAQ ## Notifications and monitoring Q1: When will I receive notifications about my quota usage? After you start Automatic Management, it can take up to 24 hours for the initial opt-in to take effect and begin monitoring your quotas. Once Automatic Management is active, notifications are typically delivered within an hour of reaching a configured threshold. Q2: How often will I receive reminder notifications? If the quota threshold breach remains active, you'll receive reminder notifications at different frequencies based on your utilization level: + **At or above 95% utilization:** Once every 6 hours + **Below 95% utilization:** Once every 24 hours Q3: Why didn't I receive a notification even though my quota usage reached the configured thresholds? Notifications are typically delivered within an hour of reaching a threshold. If you consistently don't receive expected notifications, contact AWS Support with details about the specific quota, Region, and timeframe for further investigation. Q4: Can I exclude specific resources from notifications? No, you can't configure notification exclusions at the resource level. Automatic Management operates at the quota level, not the resource level. You can only exclude notifications on a quota basis. For instructions on excluding specific quotas from notifications, see [Excluding quotas from Automatic Management](excluding-quotas.md). Q5: Why did I receive an APPROACHING\$1THRESHOLD notification instead of THRESHOLD\$1BREACH even though my quota reached 100% utilization? The notification type is determined by whether the quota supports automatic adjustment, not by the utilization level: + **APPROACHING\$1THRESHOLD:** Sent for quotas that support automatic adjustment. This notification type indicates that you can optimize your quota utilization or request a quota increase. + **THRESHOLD\$1BREACH:** Sent for quotas that cannot be automatically adjusted. This notification type indicates that you need to optimize your quota utilization to mitigate the threshold breach. Even if your utilization reaches 100%, you'll receive an APPROACHING\$1THRESHOLD notification if the quota supports automatic adjustment. For more information about notification types, see [Integrating event-driven applications with Service Quotas using Amazon EventBridge](eventbridge-integration.md). ## Auto-adjustment process Q6: What happens when the system automatically requests a quota increase on my behalf? When you enable **Notify and Auto-Adjust** mode, the system automatically submits a quota increase request when your usage breaches the configured threshold. **How auto-adjustment works** Automatic processing Auto-adjustment submits quota increase requests without creating a support case. Notification of results You receive notifications about the result of auto-adjustment requests. Manual fallback If the request can't be processed through auto-adjustment, the request result shows as `NOT_APPROVED` and you receive a Health notification. In these cases, submit a quota increase request manually through AWS Service Quotas. Q7: Are auto-adjust requests evaluated differently than manual Service Quotas requests? Yes, auto-adjust requests are processed differently than manual quota increase requests. Auto-adjust requests only work for quotas that support automated processing and are submitted without creating a support case. These requests use a streamlined approval process that may have different criteria than manual requests that go through AWS Support. If an auto-adjust request isn't approved, you can submit a manual quota increase request through the Service Quotas console or API, which may be approved even if the auto-adjust request wasn't. Q8: Why don't I see explicit rejection reasons for auto-adjust failures? Auto-adjust requests use an automated approval process that doesn't provide detailed rejection reasons. When an auto-adjust request fails, you receive a notification that the request was `NOT_APPROVED`, but specific rejection details aren't available. For more information about why a quota increase wasn't approved, submit a manual quota increase request through the Service Quotas console, which provides more detailed feedback through the support case process. Q9: Which quotas support auto-adjust? Not all service quotas support auto-adjustment. Only quotas that support automated processing can be auto-adjusted. Auto-adjustable status doesn't guarantee approval. If an auto-adjust request fails, submit a manual quota increase request through the Service Quotas console or API. To view which quotas are supported in your account: 1. Open the Service Quotas console. 1. Navigate to **Automatic Management**. 1. View the list of monitored quotas, which shows only the quotas that support Automatic Management in your account and Region. ## Troubleshooting Q10: My auto-adjust request failed, but a manual request for the same quota was approved. Why? Auto-adjust requests and manual quota increase requests use different approval processes: + **Auto-adjust requests** use automated processing with predefined criteria and may be more restrictive. + **Manual requests** go through AWS Support and can be reviewed by support engineers who can consider additional context and factors. If your auto-adjust requests consistently fail, consider submitting manual quota increase requests through the Service Quotas console for those specific quotas. Q11: How can I track auto-adjust request results? You can monitor auto-adjust request results through several methods: + **AWS Health Dashboard:** View notifications about auto-adjust request results. + **Request quota increase history:** Use the `ListRequestedServiceQuotaChangeHistoryByQuota` API to view the history of quota increase requests for a specific quota. + **Configured notification channels:** Receive notifications through email, AWS Console Mobile Application, or other configured channels. ## Need more help? If you have additional questions or need assistance with Automatic Management, contact AWS Support or refer to the [Service Quotas documentation](https://docs.aws.amazon.com/servicequotas/).