Service Quotas for Confluent Cloud

There is a maximum quantity of some resources and/or operations that can be used by organizations, environments, accounts, networks, and clusters in Confluent Cloud. This topic lists default limits, also called service quotas, for these resources by their scope.

Your organization can request that some limits be increased, and if a limit is raised, your organization’s applied limits may be different from the default maximums listed in this topic. You can check applied limits for your organization by using the Service Quotas API.

To request an increase for a limit, contact Confluent Support. Note that not all limits can be increased, and there are hard limits for all resources.

Organization quotas

The following table shows the default service quotas for the Organization scope. To query for the currently applied limits, see Organization quotas.

Resource Default limit
Audit Log consumer API keys (owned by the organization’s audit consumer service account) 2
Cloud API keys (includes keys owned by user accounts and by service accounts) 100
Environments 10
Identity providers (OAuth) 5
Kafka clusters 50
Rolebindings (RBAC) 1000
Service accounts 1000
User accounts (active and invited) 500

Environment quotas

The following table shows the default service quotas for the Environment scope. To query for the currently applied limits, see Environment quotas.

Resource Default limit
Kafka clusters 20
Kafka clusters in provisioning state 3
Kafka cluster CKUs 50
ksqlDB clusters 10
Schema Registry 1
Networks 3

Network quotas

The following table shows the default service quotas for the Network scope. To query for the currently applied limits, see Network quotas.

Note

  • For Kafka clusters and Kafka cluster CKUs, consuming more of one reduces how many of the other you can consume.
  • For private networks, the Organization and Environment scope limits for the number of Kafka clusters and the number of CKUs are not applicable. To query for the currently applied limits, see Network quotas.
Resource Default limit
Kafka clusters 10
Kafka cluster CKUs 72
VPC or VNet peering connections 25
AWS PrivateLink account accesses per network (unlimited connections) 10
Azure Private Link subscription accesses per network (unlimited connections) 10
Google Cloud Private Service Connect project accesses per network (unlimited connections) 10
Transit gateway attachments 1

Kafka cluster quotas

The following table shows default service quotas for the Kafka cluster scope. To query for the currently applied limits, see Kafka cluster quotas.

Cluster type Resource Default limit
Dedicated Kafka cluster Resource-specific API keys (for Kafka, Schema Registry, and ksqlDB; includes keys owned by user accounts and by service accounts) Note that the Organization API key limit can be raised. However, a Dedicated Cluster is restricted to the Dedicated Cluster API key limit provided here. 2000
Dedicated Kafka cluster CKUs for customers with credit card billing 4 (Can be incrementally increased up to 100 CKUs. Contact Confluent Support.)
Dedicated Kafka cluster CKUs for customers with integrated cloud provider billing or payment using an invoice 24 (Can be incrementally increased up to 100 CKUs. Contact Confluent Support.)
Basic Kafka cluster Resource-specific API keys (for Kafka, Schema Registry, and ksqlDB; includes keys owned by user accounts and by service accounts) 50
Standard Kafka cluster Resource-specific API keys (for Kafka, Schema Registry, and ksqlDB; includes keys owned by user accounts and by service accounts) 100
Any Kafka cluster Connector tasks 250

Service account quotas

The following table shows the default service quotas for the service account scope. To query for the currently applied limits, see Service account quotas.

Resource Default limit
Resource-specific API keys (for Kafka, Schema Registry, and ksqlDB) 10
Cloud API keys 10

User account quotas

The following table shows the default service quotas for the user account scope. To query for the currently applied limits, see User account quotas.

Resource Default limit
Resource-specific API keys (for Kafka, Schema Registry, and ksqlDB) 10
Cloud API keys 10

Identity provider (OAuth) quotas

The following table shows the default service quotas for the OAuth identity provider scope.

Resource Default limit
Identity pools 100

ksqlDB cluster quotas

The following table shows the service quotas for ksqlDB clusters.

Resource Limit
CSUs 12
Persistent queries 20