How to Increase the PoliciesPerRole Quota in AWS

When onboarding multiple asset types (more than 5), some customers may encounter stack deployment failures due to the PoliciesPerRole quota being exceeded in their AWS account. This quota limits the number of policies that can be attached to a single IAM role.

To resolve this, you will need to request a quota increase in AWS. Follow the steps below to update the PoliciesPerRole quota for the account where the stack is being deployed.

How to Increase the PoliciesPerRole Quota in AWS

AWS IAM roles have a default limit of 10 managed policies per role. This is a soft limit, meaning it can be increased via the AWS Service Quotas console. The quota must be updated specifically in the us-east-1 region, where IAM quotas are managed globally.

1. Switch to Region: us-east-1

   1. IAM quotas is a global quota, and can only be modified in the us-east-1 region.

      

2. Open AWS Service Quotas dashboard

   1. Navigate to the AWS Console and search for Service Quotas. Then select the Service Quotas services

      

3. Select AWS Services

   1. In the Service Quotas dashboard, click on AWS services. On the left hand navigation list.

      

4. Locate IAM Service and Quota

   1. Search for "AWS Identity and Access Management (IAM)" in AWS services, then select the service.

      

   2. Under AWS services, search for Identity and Access Management (IAM).
      Search for “Managed policies per role”. Then select the quota and request the increase.

      
      
      

5. Request a Quota Increase

   1. Click on the quota entry and select Request quota increase.

   2. Enter the desired value (e.g., 15-20).

   3. Submit the request.