Quotas and limits

Secret Manager quotas and limits

These quotas apply to each Google Cloud project and are shared across all applications and IP addresses using that project.

Content limits

The Secret Manager API enforces the following usage limits for a given secret version.

Content limit	Value
Payload size	64 KiB
Alias	50

Soft-enforced rate limits for modifying secrets and secret versions

The following table details the soft-enforced rate limits for AddSecretVersion and UpdateSecret operations:

Type of secret	Rate limit
Global secret	2 requests per second (2 qps) per secret, and 120 requests per minute (120 qpm) per secret.
Regional secret	80 requests per second (80 qps) per secret per region, and 4800 requests per minute (4800 qpm) per secret per region.

The following table details the rate limits for EnableSecretVersion, DisableSecretVersion, and DestroySecretVersion operations:

Type of secret	Rate limit
Global secret	1 request per second (1 qps) per secret version, and 60 requests per minute (60 qpm) per secret version.
Regional secret	50 requests per second (50 qps) per secret version per region, and 3000 requests per minute (3000 qpm) per secret version per region.

Quotas on the rate of requests

The current API usage quotas for the Secret Manager API are as follows (and are subject to change):

Request quota	Value
Access request	90,000 per minute per project
Read request	600 per minute per project
Write request	600 per minute per project

• An access request is any call to the access API method.

• A read request is any non-mutating operation (an operation that does not modify a secret version) except for access requests. Examples include listing secrets and fetching secret metadata.

• A write request is any mutating operation (an operation that modifies or deletes a secret or secret version). Examples include creating, updating, or deleting a secret, or adding, enabling, disabling, or destroying a secret version.

Checking your quotas

To check the current quotas for resources in your project, go to the Quotas page in the Google Cloud console.

Requesting increases

To request an increase of your Secret Manager quotas, please contact your sales representative or contact Google Cloud Support.

Parameter Manager quotas and limits

These quotas apply to each Google Cloud project and are shared across all applications and IP addresses using that project.

Content limits

The Parameter Manager API enforces the following usage limits for a given parameter version.

Content limit	Value
Payload size	1 MiB

Quotas on the rate of requests

The current API usage quotas for Parameter Manager is 1200 requests per minute (and is subject to change).

Checking your quotas

To check the current quotas for resources in your project, go to the Quotas page in the Google Cloud console.

Requesting increases

To request an increase of your Parameter Manager quotas, please contact your sales representative or contact Google Cloud Support.