CODEWITHSUNDEEP
amazon-web-servicesamazon-iam
Amit Manchanda
Amit Manchanda

Reputation: 195

AWS IAM users limit if exceeds

IAM user limit is 5000 per AWS account. I have more users than this.

Please tell me if there is any way to have more than 5000 IAM users.

Upvotes: 8

Views: 13797

Answers (2)

Oussama Filani
Oussama Filani

Reputation: 213

in this situation, you can use identities outside of AWS such as SAML, Facebook, Twitter, and Google in your corporate directory. If those users need to work with AWS resources (or work with applications that access those resources), then those users also need AWS security credentials. You can use an IAM role to specify permissions for users whose identity is federated from your organization or a third-party identity provider

you can learn more about that here https://aws.amazon.com/identity/federation/

Upvotes: 0

Naveen Vijay
Naveen Vijay

Reputation: 16492

I am quite not sure or convinced that you have a need for more than 5000 AWS IAM Users; the direct implication is that there are 5000+ people or applications who are operating under a single AWS account.

Be sure your application's users aren't the same as your IAM users; example assume you are running a simple Blog / CMS -> which has user roles of admin, content creator, content publisher, content editor; under each roles you have 10 different users so there would be 40 users [ 4 Roles x 10 Users in each Role = 40 users ]. These users would be created under application / infra layers and not IAM users.

The default maximum limit is 5000 users per AWS account. Beyond which you need to workout a solution with STS - http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html.

Again if you need 5000+ IAM users per AWS account; the simplest way is to separate out AWS accounts for individual application [ or also use sub accounts ]

Upvotes: 9

Related Questions