Resource Management limits - Resource Management - Alibaba Cloud Documentation Center

Lists the limits on resource directories, resource sharing, resource groups, and tags in Resource Management.

Resource directory limits

Item	Upper limit	Adjustable	Remarks
Resource directories per Alibaba Cloud account	1	N/A	Members of a resource directory cannot create their own resource directories.
Root folders per resource directory	1	N/A	N/A
Folders per resource directory	100	Apply for a quota	Excludes the Root folder.
Folder nesting levels	5	N/A	Excludes the Root folder.
Members per resource directory	50	Apply for a quota	N/A
Valid invitations per day	20	Apply for a quota	Excludes accepted invitations.
Validity period of an invitation	14 days	N/A	N/A
Security verification codes per day for binding a phone number to a member	100	N/A	N/A
Custom access control policies per resource directory	1,500	N/A	N/A
Custom access control policies per folder or member	10	Apply for a quota	N/A
Characters per custom access control policy	4,096	N/A	N/A
Member deletions per 30-day window	A 30-calendar-day period starts from the first deletion task. Limits per period: If the `Number of members < 100` condition is met, up to 10 members can be deleted. If the `100 ≤ Number of members ≤ 10,000` condition is met, up to 10% of members can be deleted. If the `Number of members > 10,000` condition is met, up to 1,000 members can be deleted.	Apply for a quota	N/A
Contacts per resource directory	10	Apply for a quota	N/A

Item	Upper limit	Adjustable
Resource shares per account	1,000	Apply for a quota
Shared resources per account	1,000	Apply for a quota

Item	Limit	Adjustable
Number of resource groups	30	Apply for a quota
Characters in a resource group identifier	50	N/A
Characters in a resource group name	50	N/A
Number of custom transfer rules	10	N/A
Transfer conditions per custom transfer rule	10	N/A

Item	Limit	Adjustable	Remarks
Tags per resource	20	Apply for a quota	The quota varies by resource type. Check adjustability in Quota Center. Approved quota increases take effect within one hour. When increasing the quota for ECS instances, also increase quotas for ECS disks and ECS elastic network interfaces (ENIs), which are created together with instances.
Predefined tags per account	1,000	N/A	N/A
Values per predefined tag key	1,000	N/A	N/A
Tag key	Up to 128 characters. Allows letters, digits, spaces, and these special characters: `_ . # / = + - @`. Cannot start with `aliyun` or `acs:`, or contain `http://` or `https://`. Note Tag key constraints may vary by cloud service. Check the specific service documentation.	N/A	N/A
Tag value	Up to 128 characters. Allows letters, digits, spaces, and these special characters: `_ . # / = + - @`. Cannot start with `aliyun` or `acs:`, or contain `http://` or `https://`. Note Tag value constraints may vary by cloud service. Check the specific service documentation.	N/A	N/A
Adding tags to resources	Each tag key on a resource can have only one value. Adding a tag with the same key as an existing tag overwrites the existing value. For example, if a resource has the `city:shanghai` tag and you add `city:newyork`, the `city:shanghai` tag is replaced.	N/A	N/A

Note

The number of policies that can be attached to a RAM user, RAM user group, or RAM role is independent of the authorization scope. The policy quota for authorization within a single resource group is the same as the quota for authorization across the entire Alibaba Cloud account. The two quotas are counted separately and do not consume each other.
RAM roles whose names start with AliyunReservedSSO are the RAM roles that Cloud Single Sign-On (CloudSSO) uses when it deploys an access configuration. The numbers of custom policies and system policies that can be attached to these RAM roles (access configurations) are centrally configured in CloudSSO. For more information, see Limitations.