Project quota
Cloud Asset Inventory enforces the rate of incoming requests based on the consumer project. Default quotas are listed below:
| Quota | Value |
|---|---|
AnalyzeIamPolicy
|
100 per minute per consumer project 1000 per day per consumer project |
AnalyzeIamPolicyLongrunning
|
100 per minute per consumer project 1000 per day per consumer project |
BatchGetAssetsHistory |
100 per minute per consumer project |
BatchGetEffectiveIamPolicies |
100 per minute per consumer project |
ExportAssets
|
60 per minute per consumer project 6000 per day per consumer project |
ListAssets |
100 per minute per consumer project |
| Real-time feed APIs | 600 per minute per consumer project |
SearchAllResources |
400 per minute per consumer project |
SearchAllIamPolicies |
400 per minute per consumer project |
| Saved Query APIs | 600 per minute per consumer project |
You can use the APIs and services quotas dashboard to view current quotas and usage for your project.
Resource organization quota
In addition to the per-project quota, Cloud Asset Inventory also enforces rate limits on incoming requests based on resource organization. The limits are as follows:
| Quota | Value |
|---|---|
ExportAssets
|
75 per minute per organization 13,000 per day per organization |
BatchGetAssetsHistory
|
180 per minute per organization 195,000 per day per organization |
ListAssets
|
800 per minute per organization 650,000 per day per organization |
QueryAssets
|
20 per minute per organization for requests with a
query statement 200 per minute per organization for requests with a job reference |
| Real-time feed APIs | 30 per minute per organization |
SearchAllResources |
1,500 per minute per organization |
SearchAllIamPolicies |
3,000 per minute per organization |
Policy Analyzer expansion limits
The Policy Analyzer limits group expansion in the group memberships and resource expansion in the resource hierarchy to the following values.
| Limit | Value |
|---|---|
AnalyzeIamPolicy group expansion |
1000 per group |
AnalyzeIamPolicy resource expansion |
1000 per resource |
AnalyzeIamPolicyLongrunning resource
expansion |
100000 per resource |
Downstream services
In addition to limits enforced by Cloud Asset Inventory, the number of incoming requests is also capped by the rate and quota of the downstream services that Cloud Asset Inventory depends on.
BigQuery
Table operations: BigQuery has a quota limit for table operations, which defines the maximum number of
ExportAssetsAPI requests to the same BigQuery table that can be performed daily.ExportAssetsissues 2 table operations per table per request.Query jobs: BigQuery has a concurrent rate limit for query job, which defines the maximum number of concurrent
ExportAssetsAPI requests that can be issued per project.
Pub/Sub
Publisher throughput: Pub/Sub has a publisher throughput limit per region, which affects the combined asset update size
Real-time feedcan publish to your topic.Message size: Pub/Sub has message limit, For
Real-time feed, if the payload of your asset update exceeds the limit, your asset update is discarded.
Requesting a quota increase
If you subscribe to Security Command Center on the Premium tier at the organization level, you can contact your account representative to request a Cloud Asset Inventory quota increase. Activating Security Command Center Premium at the project level only may not be qualified to get additional quota.