View a markdown version of this page

Quotas for Amazon Bedrock AgentCore - Amazon Bedrock AgentCore
AgentCore harness Service QuotasAgentCore Runtime Service QuotasAgentCore Memory Service QuotasAgentCore Identity Service QuotasAgentCore Gateway Service QuotasAgentCore Browser Service QuotasAgentCore Code Interpreter Service QuotasAgentCore Evaluations Service QuotasAgentCore Batch Evaluation Service QuotasAgentCore AB Testing Service QuotasAgentCore Recommendations Service QuotasAgentCore Configuration Bundle Service QuotasAgentCore Policy Service QuotasAgentCore Resource Based PoliciesAWS Agent Registry Service Quotas

Quotas for Amazon Bedrock AgentCore

Your AWS account has default quotas, formerly referred to as limits, for each AWS service. Unless otherwise noted, each quota is Region-specific. You can request increases for some quotas, and other quotas cannot be increased.

To request a quota increase, contact AWS support.

AgentCore harness Service Quotas

AgentCore harness is a logical resource. Each harness you create is backed by a managed AgentCore Runtime that AgentCore provisions and operates on your behalf. Therefore, harness invocations are bound by the same service quotas that apply to AgentCore Runtime. These quotas include resource allocation, invocation, throttling, lifecycle, and session storage limits. For all applicable quotas, see AgentCore Runtime Service Quotas.

For configurable per-invocation controls (such as iteration, timeout, and token caps), see Control cost with limits.

AgentCore Runtime Service Quotas

When working with AgentCore Runtime, you need to be aware of the service limits that apply to your account. These limits help ensure service stability and availability for all users.

Resource allocation limits

The following table describes the resource allocation limits for AgentCore Runtime. You can request increases for some quotas using the Service Quotas console.

Limit Default Value Adjustable Notes

Active session workloads per account

5,000 in US East (N. Virginia) and US West (Oregon), and 2,500 in other AWS Regions.

Yes

Can be increased via Service Quotas

Total agents per account

1,000

Yes

Can be increased via Service Quotas

Versions per agent

1,000

Yes

Can be increased via Service Quotas

Endpoints (aliases) per agent

10

Yes

Can be increased via Service Quotas

Maximum size for a Docker image in an AgentCore Runtime

2 GB

No

Maximum size for a direct code deployment package (compressed)

250 MB

No

ZIP file size limit for direct code deployment

Maximum size for a direct code deployment package (uncompressed)

750 MB

No

Unzipped package size limit for direct code deployment

Maximum hardware allocation per session

2vCPU/8GB

No

The maximum memory/CPU usage and allocation per Runtime session

Capacity providers per account

1,000

No

Applies to the Instances compute type in your account. Counts all capacity providers that you have not deleted, including those being created or deleted.

Agents per capacity provider session

20

No

Applies to the Instances compute type. The maximum number of agents that you can run on a single capacity provider session.

For more information about service quotas and how to request increases, see Requesting a quota increase in the Service Quotas User Guide.

Note

Because the Instances compute type provisions Amazon EC2 resources in your own account, your account’s quotas for those resources apply in addition to the AgentCore quotas in the preceding table. AgentCore calls the following services on your behalf to provision and manage instances, which consumes your account’s quotas. For high-throughput workloads, you might need to request increases for the following:

  • Amazon EC2 – the running instance count for the instance families you select, and the request rates for the instance operations that AgentCore calls, such as RunInstances, CreateFleet, DescribeInstances, TerminateInstances, and CreateTags. For more information, see Amazon EC2 service quotas.

  • Amazon EBS – the volume quotas for the volume types you use, and the request rates for the volume operations that AgentCore calls, such as CreateVolume, AttachVolume, DetachVolume, DeleteVolume, and DescribeVolumes. For more information, see Quotas for Amazon EBS.

  • Amazon VPC – the number of network interfaces, and the request rates for the network interface operations that AgentCore calls, such as AttachNetworkInterface and DescribeNetworkInterfaces. For more information, see Amazon VPC quotas.

  • Amazon EC2 Auto Scaling – a single shared quota that applies to all Amazon EC2 Auto Scaling API calls, rather than to an individual operation. This quota isn’t available in the Service Quotas console. To request an increase, open an AWS Support case. For more information, see Request throttling for the Amazon EC2 Auto Scaling API.

To request an increase for a quota that is available in the Service Quotas console, see Requesting a quota increase in the Service Quotas User Guide.

Invocation limits

The following table describes the invocation limits for AgentCore Runtime. You can request increases for some quotas using the Service Quotas console.

Limit Value Adjustable Notes

Request timeout

15 minutes

No

Maximum time for synchronous requests

Maximum payload size

100 MB

No

Maximum size for request/response payloads

Streaming chunk size

10 MB

No

Maximum size for individual chunks

Streaming maximum duration

60 mins

No

Maximum time for streaming connections (Response streaming, WebSocket connections)

Asynchronous job maximum duration

8 hours

No

Maximum execution time for asynchronous jobs

WebSocket frame size

64 KB

No

Maximum size for individual WebSocket frames

For more information about service quotas and how to request increases, see Requesting a quota increase in the Service Quotas User Guide.

Throttling limits

The following table describes the rate limits for AgentCore Runtime after which you will be throttled. You can request increases for some quotas using the Service Quotas console.

Limit Value Adjustable Notes

Data plane API request rate

1,000 TPS

Yes

Transactions per second per account. This quota is shared across all data plane APIs and is not enforced for each API individually. It applies to the following APIs: InvokeAgentRuntime, InvokeAgentRuntimeCommand, InvokeAgentRuntimeWithWebSocketStream, InvokeAgentRuntimeCommandShell, StopRuntimeSession, GetAgentCard, GetRuntimeProtectedResourceMetadata. Additional InvokeAgentRuntimeCommand limits: command size 1 byte–64 KB, response size up to 100 MB, timeout 1–3600 seconds (default 300 seconds). Streaming chunk size is up to 64 KB for each event; session ID minimum is 33 characters. Additional InvokeAgentRuntimeCommandShell limits: maximum connection duration 1 hour, maximum frame payload 64 KB, up to 10 concurrent shell sessions per runtime, reconnection buffer 256 KB.

New Runtime session creation rate

25 TPS

Yes

Transactions per second per account. This quota is shared across all endpoints and is not enforced for each endpoint individually. It applies to new session creation for both container-image and direct code deployment agents.

WebSocket frame rate per connection

250 frames per second

No

Control plane mutation API rate

50 TPS

No

Transactions per second per account. This quota is shared across all control plane mutation APIs and is not enforced for each API individually. It applies to CreateAgentRuntime, CreateAgentRuntimeEndpoint, UpdateAgentRuntime, UpdateAgentRuntimeEndpoint, DeleteAgentRuntime, and DeleteAgentRuntimeEndpoint.

Control plane Get API rate

150 TPS

No

Transactions per second per account. This quota is shared across all control plane Get APIs and is not enforced for each API individually. It applies to GetAgentRuntime and GetAgentRuntimeEndpoint.

Control plane List API rate

25 TPS

No

Transactions per second per account. This quota is shared across all control plane List APIs and is not enforced for each API individually. It applies to ListAgentRuntimes, ListAgentRuntimeEndpoints, and ListAgentRuntimeVersions.

For more information about service quotas and how to request increases, see Requesting a quota increase in the Service Quotas User Guide.

Lifetime session lifecycle parameters

The following table describes the lifetime session lifecycle parameters for AgentCore Runtime:

Phase Timeout Adjustable Notes

Idle session timeout

15 minutes of inactivity

Yes, through the idleRuntimeSessionTimeout API parameter in the LifecycleConfiguration data type

When this limit is reached, the execution environment is terminated and a new one is created for the session

Maximum session duration

8 hrs

Yes, through the maxLifetime API parameter in the LifecycleConfiguration data type

Session storage limits

The following table describes the limits for session storage:

Limit Value Adjustable Description

Maximum storage size

1 GB

No

Maximum total storage size per session

Maximum filesystem metadata

~50 MB

No

Approximately 100,000–200,000 files

Maximum directory depth

200 levels

No

Maximum nested directory depth

Maximum filename length

255 bytes

No

Maximum length of a single filename

Maximum symlink target length

4,095 bytes

No

Maximum length of a symlink target path

AgentCore Memory Service Quotas

The following table describes the lifetime session lifecycle parameters for AgentCore Memory:

Limit Value Adjustable Notes

Maximum number of AgentCore Memory resources per AWS Region in an AWS account

150

Yes

Maximum number of memory strategies per AgentCore Memory resource

6

No

Maximum memory strategies per account

900

Yes

Maximum CreateMemory requests

3

Yes

The maximum number of CreateMemory requests per second that you can perform in this AWS account in the current AWS Region.

Maximum GetMemory requests

50

Yes

The maximum number of GetMemory requests per second that you can perform in this AWS account in the current AWS Region.

Maximum DeleteMemory requests

3

Yes

The maximum number of DeleteMemory requests per second that you can perform in this AWS account in the current AWS Region.

Maximum ListMemories requests

5

Yes

The maximum number of ListMemories requests per second that you can perform in this AWS account in the current AWS Region.

Maximum UpdateMemory requests

3

Yes

The maximum number of UpdateMemory requests per second that you can perform in this AWS account in the current AWS Region.

Minimum EventExpirationDuration days in a CreateEvent operation

7

No

Maximum EventExpirationDuration days in a CreateEvent operation

365

No

Maximum prompt size (AppendToPrompt) for custom memory strategy (Extraction/Consolidation)

30 KB

No

Maximum number of messages per CreateEvent operation

100

No

Maximum message size in a CreateEvent operation

100 KB

No

Maximum event size in a CreateEvent operation

10 MB

No

Maximum CreateEvent requests

200

Yes

The maximum number of CreateEvent requests per second that you can perform in this AWS account in the current AWS Region.

Maximum CreateEvent requests per actor, per session, including conversational payloads

5

No

The maximum number of CreateEvent requests per second, per actor, per session, including conversational payloads that you can perform in this AWS account in the current AWS Region.

Maximum CreateEvent requests per actor, per session, not including conversational payloads

10

No

The maximum number of CreateEvent requests per second, per actor, per session, not including conversational payloads that you can perform in this AWS account in the current AWS Region.

Maximum DeleteEvent requests

20

Yes

The maximum number of DeleteEvent requests per second that you can perform in this AWS account in the current AWS Region.

Maximum DeleteEvent requests per actor, per session

5

Yes

The maximum number of DeleteEvent requests per second, per actor, per session that you can perform in this AWS account in the current AWS Region.

Maximum ListEvents requests

200

Yes

The maximum number of ListEvents requests per second that you can perform in this AWS account in the current AWS Region.

Maximum RetrieveMemoryRecords requests

30

Yes

The maximum number of RetrieveMemoryRecords requests per second that you can perform in this AWS account in the current AWS Region.

Maximum ListMemoryRecords requests

30

Yes

The maximum number of ListMemoryRecords requests per second that you can perform in this AWS account in the current AWS Region.

Maximum requests for all other AgentCore Memory APIs

20

Yes

The maximum transactions per second (TPS) that can be processed in this AWS account in the current AWS Region for all other AgentCore Memory APIs.

Maximum number of tokens per minute for long-term memory extraction

150,000

Yes

The maximum number of tokens per minute that can be processed for long-term memory extraction for built-in strategies in this AWS account in the current AWS Region. You can monitor token use through the Amazon CloudWatch metric named TokenCount in the Bedrock-AgentCore namespace. You can request an increase to this limit through the Service Quotas console.

Maximum number of tokens per minute for episodic long-term memory extraction per session

50,000

No

The per-session, tokens per minute limit that can be processed for episodic long-term memory extraction in this AWS account in the current AWS Region.

AgentCore Identity Service Quotas

When working with AgentCore Identity, you need to be aware of the service limits that apply to your account. These limits help ensure service stability and availability for all users.

Resource limits

The following table describes the resource limits for AgentCore Identity. You can request increases for some quotas using the Service Quotas console.

Limit Default Value Adjustable Notes

Workload identities

11,000

Yes

The maximum number of workload identities that you can create in this account in the current Region.

Resource OAuth2 credential providers

50

Yes

The maximum number of OAuth2 credential providers for egress resources that you can create in this account in the current Region.

Resource API key credential providers

50

Yes

The maximum number of API key credential providers for egress resources that you can create in this account in the current Region.

Resource Payment credential providers

50

Yes

The maximum number of payment credential providers for egress resources that you can create in this account in the current Region.

Throttling limits

The following table describes the rate limits for AgentCore Identity APIs after which you will be throttled. You can request increases for some quotas using the Service Quotas console.

Limit Value Adjustable Notes

CreateWorkloadIdentity API rate

20 TPS

Yes

Transactions per second per account

GetWorkloadIdentity API rate

20 TPS

Yes

Transactions per second per account

UpdateWorkloadIdentity API rate

20 TPS

Yes

Transactions per second per account

DeleteWorkloadIdentity API rate

20 TPS

Yes

Transactions per second per account

ListWorkloadIdentities API rate

20 TPS

Yes

Transactions per second per account

GetWorkloadAccessToken API rate

200 TPS

Yes

Transactions per second per account

GetWorkloadAccessTokenForJWT API rate

200 TPS

Yes

Transactions per second per account

GetWorkloadAccessTokenForUserId API rate

200 TPS

Yes

Transactions per second per account

CreateOauth2CredentialProvider API rate

20 TPS

Yes

Transactions per second per account

GetOauth2CredentialProvider API rate

20 TPS

Yes

Transactions per second per account

UpdateOauth2CredentialProvider API rate

20 TPS

Yes

Transactions per second per account

DeleteOauth2CredentialProvider API rate

20 TPS

Yes

Transactions per second per account

ListOauth2CredentialProviders API rate

20 TPS

Yes

Transactions per second per account

CreateApiKeyCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

GetApiKeyCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

UpdateApiKeyCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

DeleteApiKeyCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

ListApiKeyCredentialProviders API rate

20 TPS

Yes

Transactions per second per account

CreatePaymentCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

GetPaymentCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

UpdatePaymentCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

DeletePaymentCredentialProvider API rate

20 TPS

Yes

Transactions per second per account

ListPaymentCredentialProviders API rate

20 TPS

Yes

Transactions per second per account

GetResourceOauth2Token API rate

200 TPS

Yes

Transactions per second per account

GetResourceApiKey API rate

200 TPS

Yes

Transactions per second per account

GetResourcePaymentToken API rate

200 TPS

Yes

Transactions per second per account

CompleteResourceTokenAuth API rate

100 TPS

Yes

Transactions per second per account

For more information about service quotas and how to request increases, see Requesting a quota increase in the Service Quotas User Guide.

AgentCore Gateway Service Quotas

This section provides information about Amazon Bedrock AgentCore Gateway endpoints and service limits.

Endpoints

Amazon Bedrock AgentCore Gateway provides AWS Region-specific endpoints for management operations and runtime access.

The Amazon Bedrock AgentCore Gateway control plane endpoints use the following format, where you can replace <region> with any of the AWS Regions listed in Supported AWS Regions.

bedrock-agentcore-control.<region>.amazonaws.com

The AgentCore Gateway URLs for runtime access have the following format:

https://{gateway-Id}.gateway.bedrock-agentcore.{Region}.amazonaws.com

Where:

  • {gateway-Id} is the unique identifier for your gateway

  • {Region} is the AWS Region where your gateway is deployed

Gateway ARNs have the following format:

arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${gateway-Id}

The AgentCore service principal is: bedrock-agentcore.amazonaws.com

Service quotas

Amazon Bedrock AgentCore Gateway has the following service quotas. You can request increases for some quotas using the Service Quotas console.

Quota Default value Adjustable

Number of gateways per account

1000

Yes

Number of targets per gateway

100

Yes

Number of tools per target

1000

Yes

Timeout for a gateway invocation

15 minutes

Yes

Maximum inline schema size

1 MB

Yes

Maximum S3 payload schema size

10 MB

Yes

Tool name character limit

256 characters

Yes

CreateGateway API rate

5 transactions per second

Yes

UpdateGateway API rate

5 transactions per second

Yes

GetGateway API rate

10 transactions per second

Yes

ListGateways API rate

10 transactions per second

Yes

DeleteGateway API rate

5 transactions per second

Yes

CreateGatewayTarget API rate

5 transactions per second

Yes

UpdateGatewayTarget API rate

5 transactions per second

Yes

GetGatewayTarget API rate

10 transactions per second

Yes

ListGatewayTargets API rate

10 transactions per second

Yes

DeleteGatewayTarget API rate

5 transactions per second

Yes

Concurrent target operations (total of Create/Update/DeleteTarget) on same gateway

5

Yes

tool-call/tool-list rate at gateway level

200 transactions per second

Yes

tool-call/tool-list rate at account level

200 transactions per second

Yes

tool-call/tool-list concurrent connections at gateway level

5000 concurrent connections

Yes

tool-call/tool-list concurrent connections at account level

5000 concurrent connections

Yes

Search-based tool-call rate

25 transactions per minute

Yes

Maximum tool-call/tool-list/tool-search payload size

6 MB

Yes

Rate of Web Search Tool requests

10 transactions per second

Yes

For more information about service quotas and how to request increases, see Requesting a quota increase in the Service Quotas User Guide.

AgentCore Browser Service Quotas

The Browser tool has the following service quotas and considerations that apply to your account.

Quota Default Value Adjustable Notes

Concurrent active sessions per account

1000

Yes

Can be increased via support ticket

Total Browser tool configurations per account

1000

Yes

Can be increased via support ticket

Hardware configuration per session

1vCPU/4GB

No

The maximum memory/CPU usage and configuration per account

Browser Invocation Limits

The following table describes the invocation limits for the Browser tool:

Limit Value Adjustable Notes

Automation stream limit per session

1

No

Maximum number of automation streams per session

Live view stream limit per session

1

No

Maximum number of live view streams per session

Asynchronous command max duration

8 hrs

No

Maximum execution time for asynchronous commands

Disk size

10 GB

No

Maximum disk space available per session

Browser Extensions Limits

The following table describes the limits for browser extensions:

Limit Value Adjustable Notes

Maximum file size per extension

10 MB

Yes

Each extension ZIP file limit

Maximum extensions per session

10

Yes

Total extensions per session

Browser Profile Limitations

The following table describes the limits for browser profiles:

Limit Value Adjustable Notes

Maximum size per profile

50 MB

Yes

The size limit applies to cookies and localStorage in total

Maximum number of profiles per account

100

Yes

Can be increased via support ticket

Browser Proxy Limits

The following table describes the limits for browser proxies:

Limit Value Adjustable Notes

Maximum proxies per session

5

No

Total external proxies in proxyConfiguration

Maximum domain patterns per proxy

50

No

domainPatterns array per proxy

Maximum total domain patterns

100

No

Across all proxies and bypass

Server hostname length

253 characters

No

Standard DNS limit

Domain pattern length

253 characters

No

Standard DNS limit

Browser Throttling Limits

The following table describes the rate limits for the Browser tool APIs after which you will be throttled:

Limit Value Adjustable Notes

CreateBrowser API rate

5 TPS

Yes

Transactions per second per account

GetBrowser API rate

30 TPS

Yes

Transactions per second per account

ListBrowsers API rate

30 TPS

Yes

Transactions per second per account

DeleteBrowser API rate

5 TPS

Yes

Transactions per second per account

StartBrowserSession API rate

30 TPS

Yes

Transactions per second per account

GetBrowserSession API rate

30 TPS

Yes

Transactions per second per account

ListBrowserSessions API rate

30 TPS

Yes

Transactions per second per account

StopBrowserSession API rate

30 TPS

Yes

Transactions per second per account

UpdateBrowserStream API rate

30 TPS

Yes

Transactions per second per account

ConnectBrowserAutomationStream API rate

30 TPS

Yes

Transactions per second per account

ConnectBrowserLiveViewStream API rate

30 TPS

Yes

Transactions per second per account

InvokeBrowser API rate

5 TPS

Yes

Transactions per second per account

SaveBrowserSessionProfile API rate

10 TPS

Yes

Transactions per second per account

CreateBrowserProfile API rate

5 TPS

Yes

Transactions per second per account

GetBrowserProfile API rate

30 TPS

Yes

Transactions per second per account

ListBrowserProfiles API rate

30 TPS

Yes

Transactions per second per account

DeleteBrowserProfile API rate

5 TPS

Yes

Transactions per second per account

AgentCore Code Interpreter Service Quotas

The Code Interpreter tool has the following service quotas and considerations that apply to your account.

Quota Default Value Adjustable Notes

Concurrent active sessions per account

1000

Yes

Can be increased via support ticket

Total Code Interpreter tool configurations per account

1000

Yes

Can be increased via support ticket

Hardware configuration per session

2vCPU/8GB

No

The maximum memory/CPU usage and configuration per account

Code Interpreter Invocation Limits

The following table describes the invocation limits for the Code Interpreter tool:

Limit Value Adjustable Notes

Request timeout

15 mins

No

Maximum time for synchronous requests

Max payload size

100 MB

No

Maximum size for request/response payloads

Asynchronous command max duration

8 hrs

No

Maximum execution time for asynchronous commands

Disk size

10 GB

No

Maximum disk space available per session

Code Interpreter Throttling Limits

The following table describes the rate limits for the Code Interpreter tool APIs after which you will be throttled:

Limit Value Adjustable Notes

CreateCodeInterpreter API rate

5 TPS

Yes

Transactions per second per account

GetCodeInterpreter API rate

30 TPS

Yes

Transactions per second per account

ListCodeInterpreters API rate

30 TPS

Yes

Transactions per second per account

DeleteCodeInterpreter API rate

5 TPS

Yes

Transactions per second per account

StartCodeInterpreterSession API rate

30 TPS

Yes

Transactions per second per account

GetCodeInterpreterSession API rate

30 TPS

Yes

Transactions per second per account

ListCodeInterpreterSessions API rate

30 TPS

Yes

Transactions per second per account

StopCodeInterpreterSession API rate

30 TPS

Yes

Transactions per second per account

InvokeCodeInterpreter API rate

30 TPS

Yes

Transactions per second per account

AgentCore Evaluations Service Quotas

The following table describes the service quotas for AgentCore Evaluations:

Limit Default Value Adjustable Notes

Input tokens per minute for built-in evaluators

200,000

No

Evaluations per minute for built-in evaluators

100

No

Spans per on-demand evaluation

1000

No

On-demand evaluation payload size (in MB)

15

No

Evaluators per on-demand evaluation

1

No

Input tokens per evaluation

200,000

No

Spans evaluated per sampled session

1000

No

Size of all spans in a sampled session (in MB)

15

No

Online evaluation configurations per account

1,000

No

Evaluators per online evaluation configuration

10

No

AgentCore Batch Evaluation Service Quotas

The following are the service quotas for AgentCore Batch Evaluation. These quotas ensure service stability and availability.

Throttling limits

The following table describes the rate quotas for AgentCore Batch Evaluation APIs. Requests exceeding these quotas are throttled.

Limit Value Adjustable Notes

CreateBatchEvaluation API rate

3 TPS

No

Transactions per second per account

StopBatchEvaluation API rate

3 TPS

No

Transactions per second per account

DeleteBatchEvaluation API rate

3 TPS

No

Transactions per second per account

GetBatchEvaluation API rate

60 TPS

No

Transactions per second per account

ListBatchEvaluations API rate

60 TPS

No

Transactions per second per account

Resource limits

Limit Value Adjustable Notes

Active evaluations per account

5

No

Maximum concurrent batch evaluations running

Maximum batch evaluations per account

2,000

No

Total batch evaluations that can exist. To create more, delete existing batch evaluations.

Sessions per evaluation job

500

No

Maximum number of sessions per batch evaluation job

Evaluators per job

10

No

Maximum number of evaluators per batch evaluation job

AgentCore AB Testing Service Quotas

The following are the service quotas for AgentCore AB Testing. These quotas ensure service stability and availability.

Throttling limits

The following table describes the rate quotas for AgentCore AB Testing APIs. Requests exceeding these quotas are throttled.

Limit Value Adjustable Notes

CreateABTest API rate

3 TPS

No

Transactions per second per account

UpdateABTest API rate

3 TPS

No

Transactions per second per account

DeleteABTest API rate

3 TPS

No

Transactions per second per account

GetABTest API rate

60 TPS

No

Transactions per second per account

ListABTests API rate

60 TPS

No

Transactions per second per account

Resource limits

Limit Value Adjustable Notes

Active AB tests per account

20

No

AB tests with execution status of PAUSED or RUNNING

Maximum AB tests per gateway

1

No

Treatments per AB test

2

No

Control and one treatment variant

Maximum AB tests per account

2,000

No

Total AB tests that can exist. To create more, delete existing AB tests.

AgentCore Recommendations Service Quotas

The following are the service quotas for AgentCore Recommendations. These quotas ensure service stability and availability.

Throttling limits

The following table describes the rate quotas for AgentCore Recommendations APIs. Requests exceeding these quotas are throttled.

Limit Value Adjustable Notes

StartRecommendation API rate

3 TPS

No

Transactions per second per account

DeleteRecommendation API rate

3 TPS

No

Transactions per second per account

GetRecommendation API rate

60 TPS

No

Transactions per second per account

ListRecommendations API rate

60 TPS

No

Transactions per second per account

Resource limits

Limit Value Adjustable Notes

Active recommendations per account

5

No

Maximum concurrent recommendations running

Maximum recommendations per account

2,000

No

Total recommendations that can exist. To create more, delete existing recommendations.

Sessions per recommendation

20

No

Number of sessions sampled per recommendation

Spans per request (inline)

1,000

No

Maximum size of sessionSpans list when using inline input

Inline payload size

15 MB

No

Maximum size of the entire request body when using inline option

Prompt size

20,000 characters

No

Maximum prompt size for both inline and configuration bundle paths

AgentCore Configuration Bundle Service Quotas

The following are the service quotas for AgentCore Configuration Bundles. These quotas ensure service stability and availability.

Throttling limits

The following table describes the rate quotas for AgentCore Configuration Bundle APIs. Requests exceeding these quotas are throttled.

Limit Value Adjustable Notes

GetConfigBundleVersion API rate

500 TPS

No

Transactions per second per account

CreateConfigBundle API rate

3 TPS

No

Transactions per second per account

UpdateConfigBundle API rate

3 TPS

No

Transactions per second per account

DeleteConfigBundle API rate

3 TPS

No

Transactions per second per account

GetConfigBundle API rate

60 TPS

No

Transactions per second per account

ListConfigBundles API rate

60 TPS

No

Transactions per second per account

Resource limits

Limit Value Adjustable Notes

Maximum configuration bundles per account

1,000

No

Maximum bundle versions per account

10,000

No

Maximum payload (JSON) size

5 MB

No

AgentCore Policy Service Quotas

When working with AgentCore Policy, you need to be aware of the service limits that apply to your account. These limits help ensure service stability and availability for all users.

Resource limits

Quota Default value Adjustable Notes

Policy engines per account per Region

1,000

No

Policies per policy engine

1,000

No

Generated policies (7-day rolling window) per policy engine

50,000

No

Maximum policy size

10 KB

No

Per individual policy

Maximum total policy size per resource

200 KB

No

Combined size of all policies per resource within a policy engine

Cedar schema size

400 KB

No

Per policy engine schema. This limit applies to the combined Cedar schema generated from all tools across all gateways associated with the policy engine. The schema size grows with the number of tools and the complexity of their input parameters, not just the tool count. If the schema exceeds this limit, consider using separate policy engines for different gateways or removing unused tools.

Throttling limits

The following table describes the rate limits for AgentCore Policy APIs after which you will be throttled.

Limit Value Adjustable Notes

CreatePolicyEngine API rate

1 TPS

No

Transactions per second per account

GetPolicyEngine API rate

5 TPS

No

Transactions per second per account

UpdatePolicyEngine API rate

1 TPS

No

Transactions per second per account

ListPolicyEngines API rate

5 TPS

No

Transactions per second per account

DeletePolicyEngine API rate

1 TPS

No

Transactions per second per account

CreatePolicy API rate

5 TPS

No

Transactions per second per account

GetPolicy API rate

5 TPS

No

Transactions per second per account

UpdatePolicy API rate

5 TPS

No

Transactions per second per account

ListPolicies API rate

5 TPS

No

Transactions per second per account

DeletePolicy API rate

5 TPS

No

Transactions per second per account

StartPolicyGeneration API rate

1 TPS

No

Transactions per second per account

GetPolicyGeneration API rate

5 TPS

No

Transactions per second per account

ListPolicyGenerations API rate

5 TPS

No

Transactions per second per account

ListPolicyGenerationAssets API rate

5 TPS

No

Transactions per second per account

AgentCore Resource Based Policies

The following table describes the quotas for resource-based policies:

Quota Default value Adjustable

Maximum policy size

20 KB

No

Maximum statements per policy

100

No

AWS Agent Registry Service Quotas

Resource limits

Quota Default value Adjustable Notes

Maximum registries per account per Region

5

Yes

Throttling limits

The following table describes the rate limits for AgentCore Registry APIs after which you will be throttled. You can request increases for some quotas using the Service Quotas console.

Limit Value Adjustable Notes

CreateRegistry API rate

5 TPS

Yes

Transactions per second per account

GetRegistry API rate

5 TPS

Yes

Transactions per second per account

UpdateRegistry API rate

5 TPS

Yes

Transactions per second per account

DeleteRegistry API rate

5 TPS

Yes

Transactions per second per account

ListRegistries API rate

5 TPS

Yes

Transactions per second per account

CreateRegistryRecord API rate

5 TPS

Yes

Transactions per second per account

GetRegistryRecord API rate

10 TPS

Yes

Transactions per second per account

UpdateRegistryRecord API rate

5 TPS

Yes

Transactions per second per account

DeleteRegistryRecord API rate

10 TPS

Yes

Transactions per second per account

ListRegistryRecords API rate

10 TPS

Yes

Transactions per second per account

SubmitRegistryRecordForApproval API rate

10 TPS

Yes

Transactions per second per account

UpdateRegistryRecordStatus API rate

10 TPS

Yes

Transactions per second per account

SearchDiscoverableRegistryRecords API rate

10 TPS

Yes

Transactions per second per account

ListDiscoverableRegistryRecords API rate

10 TPS

Yes

Transactions per second per account

BatchGetDiscoverableRegistryRecord API rate

10 TPS

Yes

Transactions per second per account