IAM Access Analyzer quotas - AWS Identity and Access Management
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

IAM Access Analyzer quotas

IAM Access Analyzer has the following quotas:

Resource Default quota Maximum quota

Maximum account-level analyzers per analyzer type per AWS account per Region

1

1

Maximum organization-level external or unused access analyzers per analyzer type per AWS account per Region

5

20¹

Maximum organization-level internal access analyzers per AWS organization per Region

1

1

Maximum archive rules per analyzer

100

Each archive rule can have up to 20 values per criterion.

1,000¹

Maximum number of access previews per analyzer per hour

1,000

1,000

AWS CloudTrail log files processed per policy generations

100,000

100,000

Concurrent policy generations

1

1

Policy generation AWS CloudTrail data size

25 GB

25 GB

Policy generation AWS CloudTrail time range

90 days

90 days

Policy generations per day

Africa (Cape Town): 5

Asia Pacific (Hong Kong): 5

Asia Pacific (Jakarta): 5

Europe (Milan): 5

Middle East (Bahrain): 5

All other supported regions: 50

Note

Canceled policy generation requests apply to the daily quota.

Africa (Cape Town): 5

Asia Pacific (Hong Kong): 5

Asia Pacific (Jakarta): 5

Europe (Milan): 5

Middle East (Bahrain): 5

All other supported regions: 50

¹Some quotas are customer-configurable using Service Quotas.