AWS AWS Key Management Service (AWS KMS) Service Limits
57 quotas for AWS Key Management Service (AWS KMS). 55 can be increased.
| Quota | Default | Status |
|---|---|---|
GenerateDataKeyPair (ECC_NIST_P256) request rate GenerateDataKeyPair (ECC_NIST_P256) request rate throughput | 100 count | Adjustable |
ScheduleKeyDeletion request rate ScheduleKeyDeletion request rate throughput | 15 count | Adjustable |
ListKeyRotations request rate ListKeyRotations request rate throughput | 100 count | Adjustable |
UpdateCustomKeyStore request rate UpdateCustomKeyStore request rate throughput | 5 count | Adjustable |
ListGrants request rate ListGrants request rate throughput | 100 count | Adjustable |
DeleteAlias request rate DeleteAlias request rate throughput | 15 count | Adjustable |
ConnectCustomKeyStore request rate ConnectCustomKeyStore request rate throughput | 5 count | Adjustable |
Grants per CMK Grants per CMK general | 50,000 count | Adjustable |
On-demand rotations per CMK On-demand rotations per CMK general | 25 count | Fixed |
RevokeGrant request rate RevokeGrant request rate throughput | 50 count | Adjustable |
GenerateDataKeyPair (ECC_NIST_P384) request rate GenerateDataKeyPair (ECC_NIST_P384) request rate throughput | 100 count | Adjustable |
RotateKeyOnDemand request rate RotateKeyOnDemand request rate throughput | 5 count | Fixed |
CreateGrant request rate CreateGrant request rate throughput | 50 count | Adjustable |
GetParametersForImport request rate GetParametersForImport request rate throughput | 1 count | Adjustable |
GenerateDataKeyPair (RSA_2048) request rate GenerateDataKeyPair (RSA_2048) request rate throughput | 20 count | Adjustable |
GetKeyRotationStatus request rate GetKeyRotationStatus request rate throughput | 1,000 count | Adjustable |
TagResource request rate TagResource request rate throughput | 10 count | Adjustable |
GenerateDataKeyPair (RSA_4096) request rate GenerateDataKeyPair (RSA_4096) request rate throughput | 1 count | Adjustable |
EnableKeyRotation request rate EnableKeyRotation request rate throughput | 15 count | Adjustable |
CreateCustomKeyStore request rate CreateCustomKeyStore request rate throughput | 5 count | Adjustable |
GenerateDataKeyPair (ECC_NIST_EDWARDS25519) request rate GenerateDataKeyPair (ECC_NIST_EDWARDS25519) request rate throughput | 100 count | Adjustable |
CancelKeyDeletion request rate CancelKeyDeletion request rate throughput | 5 count | Adjustable |
GetPublicKey request rate GetPublicKey request rate throughput | 2,000 count | Adjustable |
Aliases per CMK Aliases per CMK general | 50 count | Adjustable |
DeleteImportedKeyMaterial request rate DeleteImportedKeyMaterial request rate throughput | 15 count | Adjustable |
GenerateDataKeyPair (RSA_3072) request rate GenerateDataKeyPair (RSA_3072) request rate throughput | 4 count | Adjustable |
Cryptographic operations (symmetric) request rate Cryptographic operations (symmetric) request rate throughput | 100,000 count | Adjustable |
UpdateAlias request rate UpdateAlias request rate throughput | 5 count | Adjustable |
UntagResource request rate UntagResource request rate throughput | 5 count | Adjustable |
PutKeyPolicy request rate PutKeyPolicy request rate throughput | 15 count | Adjustable |
UpdatePrimaryRegion request rate UpdatePrimaryRegion request rate throughput | 5 count | Adjustable |
DescribeKey request rate DescribeKey request rate throughput | 2,000 count | Adjustable |
CreateKey request rate CreateKey request rate throughput | 5 count | Adjustable |
DisconnectCustomKeyStore request rate DisconnectCustomKeyStore request rate throughput | 5 count | Adjustable |
DeleteCustomKeyStore request rate DeleteCustomKeyStore request rate throughput | 5 count | Adjustable |
DescribeCustomKeyStores request rate DescribeCustomKeyStores request rate throughput | 5 count | Adjustable |
EnableKey request rate EnableKey request rate throughput | 5 count | Adjustable |
ListKeys request rate ListKeys request rate throughput | 500 count | Adjustable |
ReplicateKey request rate ReplicateKey request rate throughput | 5 count | Adjustable |
ListAliases request rate ListAliases request rate throughput | 500 count | Adjustable |
UpdateKeyDescription request rate UpdateKeyDescription request rate throughput | 5 count | Adjustable |
Cryptographic operations (RSA) request rate Cryptographic operations (RSA) request rate throughput | 1,000 count | Adjustable |
ListResourceTags request rate ListResourceTags request rate throughput | 2,000 count | Adjustable |
Custom Key Stores Custom Key Stores general | 10 count | Adjustable |
GenerateDataKeyPair (ECC_SECG_P256K1) request rate GenerateDataKeyPair (ECC_SECG_P256K1) request rate throughput | 100 count | Adjustable |
CreateAlias request rate CreateAlias request rate throughput | 5 count | Adjustable |
GenerateDataKeyPair (ECC_NIST_P521) request rate GenerateDataKeyPair (ECC_NIST_P521) request rate throughput | 100 count | Adjustable |
ListRetirableGrants request rate ListRetirableGrants request rate throughput | 100 count | Adjustable |
ListKeyPolicies request rate ListKeyPolicies request rate throughput | 100 count | Adjustable |
Cryptographic operations (ECC & SM2) request rate Cryptographic operations (ECC & SM2) request rate throughput | 1,000 count | Adjustable |
DisableKey request rate DisableKey request rate throughput | 5 count | Adjustable |
Cryptographic operations (ML-DSA) request rate Cryptographic operations (ML-DSA) request rate throughput | 1,000 count | Adjustable |
ImportKeyMaterial request rate ImportKeyMaterial request rate throughput | 15 count | Adjustable |
Customer Master Keys (CMKs) Customer Master Keys (CMKs) general | 100,000 count | Adjustable |
GetKeyPolicy request rate GetKeyPolicy request rate throughput | 1,000 count | Adjustable |
RetireGrant request rate RetireGrant request rate throughput | 50 count | Adjustable |
DisableKeyRotation request rate DisableKeyRotation request rate throughput | 5 count | Adjustable |
How to Request a Quota Increase
- 1Open the AWS Service Quotas console.
- 2Select AWS Key Management Service (AWS KMS) from the service list.
- 3Find the quota and click "Request increase".
- 4Enter the desired value and submit. Most increases are approved within a few hours.
Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletter