AWS VPC Quotas Flashcards

1
Q

VPCs per Region

A

Default 5, Adjustable Yes, increasing quota increases internet gateway by that amount. Can enable 100s of VPCs per region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Subnets per VPC

A

Default 200, Adjustable Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IPv4 CIDR blocks per VPC

A

Default 5, Adjustable Yes, up to 50

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

IPv6 CIDR blocks per VPC

A

Default 5, Adjustable No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Elastic IP addresses per Region

A

Default 5, Adjustable Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Egress-only internet gateways per Region

A

Default 5, Adjustable Yes, To increase this quota, increase the quota on VPCs per Region. You can attach only one egress-only internet gateway to a VPC at a time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Internet gateways per Region

A

Default 5, Adjustable Yes, To increase this quota, increase the quota on VPCs per Region. You can attach only one internet gateway to a VPC at a time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

NAT gateways per Availability Zone

A

Default 5, Adjustable Yes, NAT gateways count toward your quota in the pending, active, or deleting state.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Carrier gateways per VPC

A

Default 1, Adjustable No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Prefix lists per Region

A

Default 100, Adjustable Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Versions per prefix list

A

Default 1000, Adjustable Yes, If a prefix list has 1,000 stored versions and you add a new version, the oldest version is removed so that the new version can be added.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Maximum number of entries per prefix list

A

Default 1000, Adjustable Yes, You can resize a customer-managed prefix list up to 1000. For more information, see Resize a prefix list. When you reference a prefix list in a resource, the maximum number of entries for the prefix lists counts against the quota for the number of entries for the resource. For example, if you create a prefix list with 20 maximum entries and you reference that prefix list in a security group rule, this counts as 20 security group rules.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

References to a prefix list per resource type

A

Default 5000, Adjustable Yes, This quota applies per resource type that can reference a prefix list. For example, you can have 5,000 references to a prefix list across all of your security groups plus 5,000 references to a prefix list across all of your subnet route tables. If you share a prefix list with other AWS accounts, the other accounts’ references to your prefix list count toward this quota.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Customer-managed prefix lists

A

Sets of IP address ranges that you define and manage. You can share your prefix list with other AWS accounts, enabling those accounts to reference the prefix list in their own resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

AWS-managed prefix lists

A

Sets of IP address ranges for AWS services. You cannot create, modify, share, or delete an AWS-managed prefix list.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Network ACLs per VPC

A

Default 200, Adjustable Yes, You can associate one network ACL to one or more subnets in a VPC.

17
Q

Rules per network ACL

A

Default 20, Adjustable Yes, This is the one-way quota for a single network ACL. This quota is enforced separately for IPv4 rules and IPv6 rules; for example, you can have 20 ingress rules for IPv4 traffic and 20 ingress rules for IPv6 traffic. This quota includes the default deny rules (rule number 32767 for IPv4 and 32768 for IPv6, or an asterisk * in the Amazon VPC console). This quota can be increased up to a maximum of 40; however, network performance might be impacted due to the increased workload to process the additional rules.

18
Q

Network interfaces per instance

A

Varies by instance type, Adjustable No

19
Q

Network interfaces per Region

A

Default 5000, Adjustable Yes, This quota applies to individual AWS account VPCs and shared VPCs.

20
Q

Route tables per VPC

A

Default 200, Adjustable Yes, The main route table counts toward this quota. Note that if you request a quota increase for route tables, you may also want to request a quota increase for subnets. While route tables can be shared with multiple subnets, a subnet can only be associated with a single route table.

21
Q

Routes per route table (non-propagated routes)

A

Default 50, Adjustable Yes, You can increase this quota up to a maximum of 1,000; however, network performance might be impacted. This quota is enforced separately for IPv4 routes and IPv6 routes. If you have more than 125 routes, we recommend that you paginate calls to describe your route tables for better performance.

22
Q

BGP advertised routes per route table (propagated routes)

A

Default 100, Adjustable No, If you require additional prefixes, advertise a default route.

23
Q

VPC security groups per Region

A

Default 2500, Adjustable Yes, This quota applies to individual AWS account VPCs and shared VPCs. If you increase this quota to more than 5,000 security groups in a Region, we recommend that you paginate calls to describe your security groups for better performance.

24
Q

Inbound or outbound rules per security group

A

Default 60, Adjustable Yes, You can have 60 inbound and 60 outbound rules per security group (making a total of 120 rules). This quota is enforced separately for IPv4 rules and IPv6 rules; for example, a security group can have 60 inbound rules for IPv4 traffic and 60 inbound rules for IPv6 traffic. A quota change applies to both inbound and outbound rules. This quota multiplied by the quota for security groups per network interface cannot exceed 1,000.

25
Q

Security groups per network interface

A

Default 5, Adjustable Yes (up to 16), This quota multiplied by the quota for rules per security group cannot exceed 1,000.

26
Q

Active VPC peering connections per VPC

A

Default 50, Adjustable Yes (up to 125), If you increase this quota, you should increase the number of entries per route table accordingly.

27
Q

Outstanding VPC peering connection requests

A

Default 25, Adjustable Yes, This is the number of outstanding VPC peering connection requests made from your account.

28
Q

Expiry time for an unaccepted VPC peering connection request

A

Default 1 week (168 hours), Adjustable No

29
Q

Gateway VPC endpoints per Region

A

Default 20, Adjustable Yes, You can’t have more than 255 gateway endpoints per VPC.

30
Q

Interface and Gateway Load Balancer endpoints per VPC

A

Default 50, Adjustable Yes, This is the combined quota for the maximum number of interface endpoints and Gateway Load Balancer endpoints in a VPC. To increase this quota, contact AWS Support.

31
Q

VPC endpoint policy size

A

Default 20480, Adjustable No, This quota includes white space.

32
Q

Participant accounts per VPC

A

Default 100, Adjustable Yes, This is the number of distinct participant accounts that subnets in a VPC can be shared with. This is a per VPC quota and applies across all the subnets shared in a VPC. To increase this quota, contact AWS Support. VPC owners can view the network interfaces and security groups that are attached to the participant resources.

33
Q

Subnets that can be shared with an account

A

Default 100, Adjustable Yes, This is the maximum number of subnets that can be shared with an AWS account.

34
Q

Network Address Usage

A

Default 64000, Adjustable Yes (up to 256000), The maximum number of NAU units that a single VPC can have.

35
Q

Peered Network Address Usage

A

Default 128000, Adjustable Yes (up to 512000), The maximum number of NAU units that a VPC and all of its peered VPCs can have in total. VPCs that are peered across different Regions do not contribute to this limit.