Quotas and limits

Secret Manager quotas and limits

These quotas apply to each Cloud de Confiance by S3NS project and are shared across all applications and IP addresses using that project.

Content limits

The Secret Manager API enforces the following usage limits for a given secret version.

Content limit Value
Payload size 64 KiB
Alias 50

Soft-enforced rate limits for modifying secrets and secret versions

The following table details the soft-enforced rate limits for AddSecretVersion and UpdateSecret operations:

Type of secret Rate limit
Global secret 2 requests per second (2 qps) per secret, and 120 requests per minute (120 qpm) per secret.
Regional secret 80 requests per second (80 qps) per secret per region, and 4800 requests per minute (4800 qpm) per secret per region.

The following table details the rate limits for EnableSecretVersion, DisableSecretVersion, and DestroySecretVersion operations:

Type of secret Rate limit
Global secret 1 request per second (1 qps) per secret version, and 60 requests per minute (60 qpm) per secret version.
Regional secret 50 requests per second (50 qps) per secret version per region, and 3000 requests per minute (3000 qpm) per secret version per region.

Quotas on the rate of requests

The API usage quotas for the Secret Manager API are as follows:

Request quota Value
Access request 90,000 per minute per project
Read request 600 per minute per project
Write request 600 per minute per project

  • An access request is any call to the access API method.

  • A read request is any non-mutating operation (an operation that does not modify a secret version) except for access requests. Examples include listing secrets and fetching secret metadata.

  • A write request is any mutating operation (an operation that modifies or deletes a secret or secret version). Examples include creating, updating, or deleting a secret, or adding, enabling, disabling, or destroying a secret version.

Checking your quotas

To check the quotas for resources in your project, go to the Quotas page in the Cloud de Confiance console.

Requesting increases

To request an increase of your Secret Manager quotas, please contact your sales representative or contact Cloud de Confiance Support.