AWS AWS WAF Service Limits
53 quotas for AWS WAF. 19 can be increased.
| Quota | Default | Status |
|---|---|---|
Maximum regex pattern sets per account in WAF for CloudFront Maximum regex pattern sets per account in WAF for CloudFront general | 10 count | Adjustable |
Maximum rule groups per account in WAF for regional Maximum rule groups per account in WAF for regional general | 100 count | Adjustable |
Maximum number of patterns in a regex pattern set per account in WAF for Cloudfront Maximum number of patterns in a regex pattern set per account in WAF for Cloudfront general | 10 count | Fixed |
Maximum number of web ACL capacity units in a web ACL in WAF for regional Maximum number of web ACL capacity units in a web ACL in WAF for regional general | 5,000 count | Fixed |
Maximum IP sets per account in WAF for CloudFront Maximum IP sets per account in WAF for CloudFront general | 100 count | Adjustable |
Maximum number of patterns in a regex pattern set per account in WAF for regional Maximum number of patterns in a regex pattern set per account in WAF for regional general | 10 count | Fixed |
Number of token domains per web ACL for CloudFront Number of token domains per web ACL for CloudFront general | 10 count | Adjustable |
Maximum number of rate-based statements per web ACL in WAF for Cloudfront Maximum number of rate-based statements per web ACL in WAF for Cloudfront throughput | 10 count | Fixed |
Maximum size in kilobytes of a web request body that can be inspected for CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access protections Maximum size in kilobytes of a web request body that can be inspected for CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access protections storage | 64 count | Fixed |
Maximum number of IP addresses in an IP set in WAF for regional Maximum number of IP addresses in an IP set in WAF for regional general | 10,000 count | Fixed |
Maximum number of web ACL capacity units in a rule group in WAF for regional Maximum number of web ACL capacity units in a rule group in WAF for regional general | 5,000 count | Fixed |
Maximum IP sets per account in WAF for regional Maximum IP sets per account in WAF for regional general | 100 count | Adjustable |
Maximum number of characters allowed in a regex pattern per account in WAF for regional Maximum number of characters allowed in a regex pattern per account in WAF for regional general | 200 count | Fixed |
Maximum number of ALB associations per web ACL in WAF for regional Maximum number of ALB associations per web ACL in WAF for regional general | 100 count | Adjustable |
Maximum number of web ACL capacity units in a web ACL in WAF for CloudFront Maximum number of web ACL capacity units in a web ACL in WAF for CloudFront general | 5,000 count | Fixed |
Maximum number of rate-based statements per web ACL in WAF for regional Maximum number of rate-based statements per web ACL in WAF for regional throughput | 10 count | Fixed |
Maximum regex pattern sets per account in WAF for regional Maximum regex pattern sets per account in WAF for regional general | 10 count | Adjustable |
Number of token domains per web ACL for regional Number of token domains per web ACL for regional general | 10 count | Adjustable |
Maximum number of rate-based statements per rule group in WAF for regional Maximum number of rate-based statements per rule group in WAF for regional throughput | 4 count | Fixed |
Maximum number of rate-based statements per rule group in WAF for Cloudfront Maximum number of rate-based statements per rule group in WAF for Cloudfront throughput | 4 count | Fixed |
Maximum number of characters allowed in a regex pattern per account in WAF for Cloudfront Maximum number of characters allowed in a regex pattern per account in WAF for Cloudfront general | 200 count | Fixed |
Maximum web ACLs per account in WAF for regional Maximum web ACLs per account in WAF for regional general | 100 count | Adjustable |
Maximum rule groups per account in WAF for CloudFront Maximum rule groups per account in WAF for CloudFront general | 100 count | Adjustable |
Maximum number of IP addresses in an IP set in WAF for CloudFront Maximum number of IP addresses in an IP set in WAF for CloudFront general | 10,000 count | Fixed |
Maximum size in kilobytes of a web request body that can be inspected for Application Load Balancer and AWS AppSync protections Maximum size in kilobytes of a web request body that can be inspected for Application Load Balancer and AWS AppSync protections storage | 8 count | Fixed |
Maximum web ACLs per account in WAF for CloudFront Maximum web ACLs per account in WAF for CloudFront general | 100 count | Adjustable |
Maximum combined size in kilobytes of all response body content for a single rule group or a single web ACL for CloudFront Maximum combined size in kilobytes of all response body content for a single rule group or a single web ACL for CloudFront storage | 50 count | Fixed |
Maximum number of web ACL capacity units in a rule group in WAF for CloudFront Maximum number of web ACL capacity units in a rule group in WAF for CloudFront general | 5,000 count | Fixed |
Maximum size in kilobytes of the custom response body content for a single custom response definition for CloudFront Maximum size in kilobytes of the custom response body content for a single custom response definition for CloudFront storage | 4 count | Fixed |
Maximum number of custom response headers per web ACL or rule group for CloudFront Maximum number of custom response headers per web ACL or rule group for CloudFront general | 100 count | Adjustable |
Maximum number of custom headers for a single custom request definition for regional Maximum number of custom headers for a single custom request definition for regional throughput | 10 count | Fixed |
Maximum number of custom headers for a single custom response definition for CloudFront Maximum number of custom headers for a single custom response definition for CloudFront general | 10 count | Fixed |
Maximum combined size in kilobytes of all response body content for a single rule group or a single web ACL for regional Maximum combined size in kilobytes of all response body content for a single rule group or a single web ACL for regional storage | 50 count | Fixed |
Maximum number of custom headers for a single custom request definition for CloudFront Maximum number of custom headers for a single custom request definition for CloudFront throughput | 10 count | Fixed |
Maximum number of unique IP addresses that can be blocked per rate-based rule for CloudFront Maximum number of unique IP addresses that can be blocked per rate-based rule for CloudFront throughput | 10,000 count | Fixed |
Maximum number of custom request headers per web ACL or rule group for CloudFront Maximum number of custom request headers per web ACL or rule group for CloudFront throughput | 100 count | Adjustable |
Maximum number of text transformations per rule statement for regional Maximum number of text transformations per rule statement for regional general | 10 count | Fixed |
Maximum number of requests per second per web ACL for CloudFront Maximum number of requests per second per web ACL for CloudFront throughput | 100,000 count | Adjustable |
Maximum number of custom response bodies per web ACL or rule group for regional Maximum number of custom response bodies per web ACL or rule group for regional general | 50 count | Adjustable |
Maximum number of bytes in a string match (byte match) string in WAF for CloudFront Maximum number of bytes in a string match (byte match) string in WAF for CloudFront general | 200 count | Fixed |
Maximum size in kilobytes of the custom response body content for a single custom response definition for regional Maximum size in kilobytes of the custom response body content for a single custom response definition for regional storage | 4 count | Fixed |
Maximum number of custom request headers per web ACL or rule group for regional Maximum number of custom request headers per web ACL or rule group for regional throughput | 100 count | Adjustable |
Maximum number of custom response bodies per web ACL or rule group for CloudFront Maximum number of custom response bodies per web ACL or rule group for CloudFront general | 50 count | Adjustable |
Minimum request rate that can be defined for a rate-based rule for regional Minimum request rate that can be defined for a rate-based rule for regional throughput | 10 count | Fixed |
Maximum number of referenced statements per rule group or web ACL in WAF for regional Maximum number of referenced statements per rule group or web ACL in WAF for regional general | 50 count | Fixed |
Maximum number of requests per second per web ACL for regional Maximum number of requests per second per web ACL for regional throughput | 100,000 count | Adjustable |
Maximum number of bytes in a string match (byte match) string in WAF for regional Maximum number of bytes in a string match (byte match) string in WAF for regional general | 200 count | Fixed |
Maximum number of custom headers for a single custom response definition for regional Maximum number of custom headers for a single custom response definition for regional general | 10 count | Fixed |
Maximum number of referenced statements per rule group or web ACL in WAF for Cloudfront Maximum number of referenced statements per rule group or web ACL in WAF for Cloudfront general | 50 count | Fixed |
Maximum number of unique IP addresses that can be blocked per rate-based rule for regional Maximum number of unique IP addresses that can be blocked per rate-based rule for regional throughput | 10,000 count | Fixed |
Minimum request rate that can be defined for a rate-based rule for CloudFront Minimum request rate that can be defined for a rate-based rule for CloudFront throughput | 10 count | Fixed |
Maximum number of text transformations per rule statement for CloudFront Maximum number of text transformations per rule statement for CloudFront general | 10 count | Fixed |
Maximum number of custom response headers per web ACL or rule group for regional Maximum number of custom response headers per web ACL or rule group for regional general | 100 count | Adjustable |
How to Request a Quota Increase
- 1Open the AWS Service Quotas console.
- 2Select AWS WAF from the service list.
- 3Find the quota and click "Request increase".
- 4Enter the desired value and submit. Most increases are approved within a few hours.
Learn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to NewsletterLearn AWS the Practical Way
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletter