openshift-docs/modules/rosa-required-aws-service-quotas.adoc

// Module included in the following assemblies:
//
// * rosa_install_access_delete_clusters/rosa_getting_started_iam/rosa-required-aws-service-quotas.adoc
// * rosa_planning/rosa-sts-required-aws-service-quotas.adoc

:_mod-docs-content-type: REFERENCE
[id="rosa-required-aws-service-quotas_{context}"]
= Required AWS service quotas

[role="_abstract"]
The table below describes the AWS service quotas and levels required to create and run one {product-title} cluster. Although most default values are suitable for most workloads, you might need to request additional quota for the following cases:

* {product-title} clusters require a minimum AWS EC2 service quota of
ifndef::openshift-rosa-hcp[]
100{nbsp}vCPUs
endif::[]
ifdef::openshift-rosa-hcp[]
32{nbsp}vCPUs
endif::[]
to provide for cluster creation, availability, and upgrades. The default maximum value for vCPUs assigned to Running On-Demand Standard Amazon EC2 instances is `5`. Therefore if you have not created a {product-title} cluster using the same AWS account previously, you must request additional EC2 quota for `Running On-Demand Standard (A, C, D, H, I, M, R, T, Z) instances`.

//TODO OSDOCS-11789 confirm number of secgroups on HCP clusters - Bala says 10, who can confirm?
* Some optional cluster configuration features, such as custom security groups, might require you to request additional quota. For example, because {product-title} associates 1 security group with network interfaces in worker machine pools by default, and the default quota for `Security groups per network interface` is `5`, if you want to add 5 custom security groups, you must request additional quota, because this would bring the total number of security groups on worker network interfaces to 6.

[NOTE]
====
The AWS SDK allows {product-title} to check quotas, but the AWS SDK calculation does not account for your existing usage. Therefore, it is possible for cluster creation to fail because of a lack of available quota even though the AWS SDK quota check passes. To fix this issue, increase your quota.
====

If you need to modify or increase a specific AWS quota, see Amazon's documentation on link:https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html[requesting a quota increase]. Large quota requests are submitted to Amazon Support for review, and can take some time to be approved. If your quota request is urgent, contact AWS Support.


.{product-title}-required service quota

[options="header"]
|===
|Quota name |Service code |Quota code| AWS default | Minimum required | Description

|Running On-Demand Standard (A, C, D, H, I, M, R, T, Z) instances
|ec2
|L-1216C47A
|5
a|
ifndef::openshift-rosa-hcp[]
100
endif::[]
ifdef::openshift-rosa-hcp[]
32
endif::[]
|Maximum number of vCPUs assigned to the Running On-Demand Standard (A, C, D, H, I, M, R, T, Z) instances. The default value of 5 vCPUs is not sufficient to create {product-title} clusters.

//gp2 is not used for HCP clusters
ifndef::openshift-rosa-hcp[]
|Storage for General Purpose SSD (gp2) volume storage in TiB
|ebs
|L-D18FCD1D
|50
|300
|The maximum aggregated amount of storage, in TiB, that can be provisioned across General Purpose SSD (gp2) volumes in this Region.
endif::openshift-rosa-hcp[]

//HCP minimums assume that Prometheus/Grafana is not used
|Storage for General Purpose SSD (gp3) volume storage in TiB
|ebs
|L-7A658B76
|50
a|
ifndef::openshift-rosa-hcp[]
300
endif::[]
ifdef::openshift-rosa-hcp[]
:fn-hcp-storage-quota: footnote:[The default quota of 50{nbsp}TiB is more than {product-title} clusters require; however, because AWS cost is based on usage rather than quota, Red{nbsp}Hat recommends using the default quota.]
1{fn-hcp-storage-quota}
endif::[]
a| The maximum aggregated amount of storage, in TiB, that can be provisioned across General Purpose SSD (gp3) volumes in this Region.
ifndef::openshift-rosa-hcp[]
300{nbsp}TiB
endif::[]
ifdef::openshift-rosa-hcp[]
1{nbsp}TiB
endif::[]
of storage is the required minimum for optimal performance.

ifndef::openshift-rosa-hcp[]
|Storage for Provisioned IOPS SSD (io1) volumes in TiB
|ebs
|L-FD252861
|50
|300
| The maximum aggregated amount of storage, in TiB, that can be provisioned across Provisioned IOPS SSD (io1) volumes in this Region.

300{nbsp}TiB of storage is the required minimum for optimal performance.
endif::[]

|===

.General AWS service quotas

[options="header"]
|===
|Quota name |Service code |Quota code| AWS default | Minimum required | Description

|EC2-VPC Elastic IPs
|ec2
|L-0263D0A3
|5
|5
| The maximum number of Elastic IP addresses that you can allocate for EC2-VPC in this Region.

|VPCs per Region
|vpc
|L-F678F1CE
|5
|5
| The maximum number of VPCs per Region. This quota is directly tied to the maximum number of internet gateways per Region.

|Internet gateways per Region
|vpc
|L-A4707A72
|5
|5
| The maximum number of internet gateways per Region. This quota is directly tied to the maximum number of VPCs per Region. To increase this quota, increase the number of VPCs per Region.

|Network interfaces per Region
|vpc
|L-DF5E4CA3
|5,000
|5,000
| The maximum number of network interfaces per Region.

|Security groups per network interface
|vpc
|L-2AFB9258
|5
|5
|The maximum number of security groups per network interface. This quota, multiplied by the quota for rules per security group, cannot exceed 1000.

ifndef::openshift-rosa-hcp[]
|Snapshots per Region
|ebs
|L-309BACF6
|10,000
|10,000
| The maximum number of snapshots per Region
endif::[]

ifndef::openshift-rosa-hcp[]
|IOPS for Provisioned IOPS SSD (Io1) volumes
|ebs
|L-B3A130E6
|300,000
|300,000
| The maximum aggregated number of IOPS that can be provisioned across Provisioned IOPS SDD (io1) volumes in this Region.
endif::openshift-rosa-hcp[]

|Application Load Balancers per Region
|elasticloadbalancing
|L-53DA6B97
|50
|50
|The maximum number of Application Load Balancers that can exist in each region.

ifndef::openshift-rosa-hcp[]
|Classic Load Balancers per Region
|elasticloadbalancing
|L-E9E9831D
|20
|20
|The maximum number of Classic Load Balancers that can exist in each region.
endif::openshift-rosa-hcp[]

|===

[role="_additional-resources"]
== Additional resources
* link:https://aws.amazon.com/premiumsupport/knowledge-center/request-service-quota-increase-cli/[How can I request, view, and manage service quota increase requests using AWS CLI commands?]
* link:https://docs.aws.amazon.com/ROSA/latest/userguide/service-quotas-rosa.html[{product-title} service quotas]
* link:https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html[Request a quota increase]
* link:https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html[IAM and AWS STS quotas (AWS documentation)]