Cloud Config imposes the following limits on rules, delivery tasks, and account groups.
Item | Upper limit |
Maximum number of rules allowed for a single account | 200 |
Maximum number of delivery tasks allowed for a single account | 5 |
Maximum number of account groups allowed for a management account | 5 |
Maximum number of delivery tasks allowed for an account group | 5 |
Maximum number of member accounts allowed for an account group | 200 |
The number of policies that can be attached to a RAM user, RAM user group, or RAM role is independent of the authorization scope. The policy quota for authorization within a single resource group is the same as the quota for authorization across the entire Alibaba Cloud account. The two quotas are counted separately and do not consume each other.
RAM roles whose names start with
AliyunReservedSSOare the RAM roles that Cloud Single Sign-On (CloudSSO) uses when it deploys an access configuration. The numbers of custom policies and system policies that can be attached to these RAM roles (access configurations) are centrally configured in CloudSSO. For more information, see Limitations.