Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

AWS IAM users limit if exceeds

IAM user limit is 5000 per AWS account. I have more users than this.

Please tell me if there is any way to have more than 5000 IAM users.

like image 679
Amit Manchanda Avatar asked Feb 24 '15 06:02

Amit Manchanda


People also ask

What is the IAM user limit for AWS?

IAM user limit is 5000 per AWS account. I have more users than this. Please tell me if there is any way to have more than 5000 IAM users. Show activity on this post.

What is the maximum length of an AWS managed policy?

The size of each managed policy cannot exceed 6,144 characters. IAM does not count white space when calculating the size of a policy against this limit. If you intend to use a role with the Switch Role feature in the AWS Management Console, then the combined Path and RoleName cannot exceed 64 characters.

How many managed policies can be attached to an IAM role?

I want to attach more than 20 managed policies or increase the character size limit for an AWS Identity and Access Management (IAM) role or user. The maximum limit for attaching a managed policy to an IAM role or user is 20.

Which IAM policy should I use to restrict access to AWS?

Use the following example IAM policy to provide these restrictions: Any IAM principal created by IAM admins can have full access to AWS resources. The full access to AWS resources depends upon the identity-based policies, as permissions boundaries don't provide permissions on their own.


1 Answers

I am quite not sure or convinced that you have a need for more than 5000 AWS IAM Users; the direct implication is that there are 5000+ people or applications who are operating under a single AWS account.

Be sure your application's users aren't the same as your IAM users; example assume you are running a simple Blog / CMS -> which has user roles of admin, content creator, content publisher, content editor; under each roles you have 10 different users so there would be 40 users [ 4 Roles x 10 Users in each Role = 40 users ]. These users would be created under application / infra layers and not IAM users.

The default maximum limit is 5000 users per AWS account. Beyond which you need to workout a solution with STS - http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html.

Again if you need 5000+ IAM users per AWS account; the simplest way is to separate out AWS accounts for individual application [ or also use sub accounts ]

like image 156
Naveen Vijay Avatar answered Oct 17 '22 10:10

Naveen Vijay