Menu
Amazon API Gateway
Developer Guide

Amazon API Gateway Limits and Pricing

API Gateway Limits

Unless noted otherwise, the limits can be increased upon request. To request a limit increase, contact the AWS Support Center.

API Gateway Limits for Configuring and Running an API

The following limits apply to configuring and running an API in Amazon API Gateway.

Resource or OperationDefault LimitCan Be Increased
Throttle limits per account1000 request per second (rps) with a burst limit of 2000 rps.Yes
APIs per account60Yes
API keys per account500Yes
Client certificates per account60Yes
Custom authorizers per API10Yes, per
Documentation parts per API2000Yes
Resources per API 300Yes
Stages per API10Yes
Usage plans per account300Yes
Usage plans per API key10Yes
API caching TTL300 seconds by default and configurable between 0 and 3600 by an API owner.Not for the upper bound (3600)
Integration timeout30 seconds for all integration types, including Lambda, Lambda proxy, HTTP, HTTP proxy, and AWS integrations.No
Payload size10 MBNo
Number of iterations in a #foreach ... #end loop in mapping templates1000No
ARN length of a method with authorization1600 bytesNo

All of the per API limits can only be increased on specific APIs.

When authorization is enabled on a method, the maximum length of the method's ARN (e.g., arn:aws:execute-api:{region-id}:{account-id}:{api-id}/{stage-id}/{method}/{resource}/{path}) is 1600 bytes. The path parameter values, the size of which are determined at run time, can cause the ARN length to exceed the limit. When this happens, the API client will receive a 414 Request URI too long response.

API Gateway Limits for Creating, Deploying and Managing an API

The following fixed limits apply to creating, deploying, and managing an API in API Gateway, using the AWS CLI, the API Gateway console, or the API Gateway REST API and its SDKs. These limits cannot be increased.

ActionDefault LimitCan Be Increased
CreateRestApi2 requests per minute (rpm) per account.No
ImportRestApi2 requests per minute per accountNo
PutRestApi60 requests per minute per accountNo
DeleteRestApi2 requests per minute per accountNo
CreateDeployment3 requests per minute per accountNo
UpdateAccount3 requests per minute per accountNo
GetResources150 requests per minute per accountNo
CreateResource300 requests per minute per accountNo
DeleteResource300 requests per minute per accountNo
CreateDomainName2 requests per minute per accountNo
UpdateUsagePlan3 requests per minute per accountNo
Other operationsNo limit up to the total account limit.No
Total operations10 request per second (rps) with a burst limit of 40 rps.No