AWS entityresolution documentation change
Summary
Updated service quotas documentation with regional specifics, adjusted API rate limits (e.g., GenerateMatchId reduced to 10/sec), and added region-based record limits for machine learning and rule-based workflows.
Security assessment
The changes primarily update service quota values and add regional granularity to limits. While API rate limiting (e.g., GenerateMatchId at 10/sec) could help prevent abuse, there is no explicit mention of security vulnerabilities or security-focused improvements in the diff. These appear to be standard operational quota adjustments rather than direct responses to security issues.
Diff
diff --git a/entityresolution/latest/userguide/quotas.md b/entityresolution/latest/userguide/quotas.md index 27f6cc697..b9bb9c878 100644 --- a//entityresolution/latest/userguide/quotas.md +++ b//entityresolution/latest/userguide/quotas.md @@ -4,0 +5,2 @@ +API throttling quotas + @@ -17,19 +19,21 @@ Name | Default | Adjustable | Description -Concurrent ID mapping jobs | 1 | No | The maximum number of ID mapping jobs that can be processed concurrently in the current AWS Region. -Concurrent matching jobs | 1 | No | The maximum number of matching jobs that can be processed concurrently in the current AWS Region. -Concurrent provider service matching jobs | 1 | No | The maximum number of provider service matching jobs that can be processed concurrently in the current AWS Region. -Data input | 20 | No | This is the list of input tables that you want to use in a matching workflow. Each input corresponds to a column in your AWS Glue input data table, which contains the column name and additional information that AWS Entity Resolution uses for matching purposes. Inputs must contain a Unique ID plus at least one additional input field. -Data output | 750 | No | This is a list of `OutputAttribute` objects, each of which have the fields **Name** and **Hashed**. Each of these objects represent a column to be included in the AWS Glue output table and whether you want the values in the column to be hashed. -Data schema | 25 | No | The maximum number of data schema input fields. -ID mapping workflows | 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-C5A3094C) | The maximum number of ID mapping workflows that you can create in this AWS account in the current AWS Region. -ID namespaces | 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-FBA1B7BB) | The maximum number of ID namespaces that you can create in this AWS account in the current AWS Region. -Match IDs | 500 | No | The maximum number of records that can be consolidated under one MatchID per workload. -Match rule | 15 | No | For rule-based matching, this is the rule number applied that generated a matched record set. This is part of matching workflow metadata that will be included in output. -Matching workflows | 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-60DAF647) | The maximum number of matching workflows. -Rate of `GetMatchId` API requests | 50 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-1E6F8596) | The maximum number of `GetCustomerID` API requests per second. -Records per machine learning-based workflow | 250M | Yes | The maximum number of records that can be processed by a machine learning-based matching workflow. -Records per rule-based matching workflow | 100M | Yes | The maximum number of records that can be processed by a rule-based matching workflow. -Rules per workflow | 15 | No | The maximum number of rules per matching workflow. -Schema mappings | 50 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-00E43259) | The maximum number of schema mappings that you can create in this account in the current AWS Region. -Unique match keys per across ruleset | 15 | No | The maximum number of unique match keys per rule set. A match key instructs AWS Entity Resolution which input fields are to be considered as similar data and which are to be considered as different data. This helps AWS Entity Resolution automatically configure rule-based matching rules and compare similar data stored in different input fields. - -API throttling quotas Resource | Rate limit | Description +Concurrent ID mapping jobs | Each supported Region: 1 | No | The maximum number of ID mapping workflows that can be processed concurrently in the current AWS Region. +Concurrent matching jobs | Each supported Region: 1 | No | The maximum number of matching workflows that can be processed concurrently in the current AWS Region. +Concurrent provider service matching jobs | Each supported Region: 1 | No | The maximum number of provider service matching workflows that can be processed concurrently in the current AWS Region. +ID mapping workflows | Each supported Region: 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-C5A3094C) | The maximum number of ID mapping workflows that you can create in this account in the current AWS Region. +ID namespaces | Each supported Region: 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-FBA1B7BB) | The maximum number of ID namespaces that you can create in this account in the current AWS Region. +Matching workflows | Each supported Region: 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-60DAF647) | The maximum number of matching workflows that you can create in this account in the current AWS Region. +Rate of GenerateMatchId API requests | Each supported Region: 10 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-B2BB98E6) | The maximum number of GenerateMatchId API requests per second +Rate of GetMatchId API requests | Each supported Region: 50 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-1E6F8596) | The maximum number of GetMatchId API requests per second. +Records per machine learning-based matching workflow | Each supported Region: 150,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-B8FBFF22) | The maximum number of records that can be processed by a machine learning-based matching workflow in this account in AWS Regions of af-south-1, ap-northeast-2, eu-west-2. +Records per machine learning-based matching workflow | Each supported Region: 600,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-6CABAEA7) | The maximum number of records that can be processed by a machine learning-based matching workflow in this account in AWS Regions of ap-northeast-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, us-east-1, us-east-2, us-west-2. +Records per provider ID mapping workflow | Each supported Region: 150,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-26912910) | The maximum number of records that can be processed for provider ID mapping in this account in AWS Regions of af-south-1, ap-northeast-2, eu-west-2. +Records per provider ID mapping workflow | Each supported Region: 250,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-973E8499) | The maximum number of records that can be processed for provider ID mapping in this account in AWS Regions of ap-northeast-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, us-east-1, us-east-2, us-west-2. +Records per provider service-based matching workflow | Each supported Region: 100,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-D806D7C1) | The maximum number of records that can be processed by a provider service-based matching workflow in this account in the current AWS Region. +Records per rule-based ID mapping workflow | Each supported Region: 1,000,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-6FC653B7) | The maximum number of records that can be processed for rule-based ID mapping in this account in AWS Regions of ap-northeast-1, ap-southeast-1, ap-southeast-2, ca-central-1, eu-central-1, eu-west-1, us-east-1, us-east-2, us-west-2. +Records per rule-based ID mapping workflow | Each supported Region: 150,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-FF9B14D8) | The maximum number of records that can be processed for rule-based ID mapping in this account in the AWS Regions of af-south-1, ap-northeast-2, eu-west-2. +Records per rule-based matching workflow | Each supported Region: 100,000,000 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-C5007B10) | The maximum number of records that can be processed by a rule-based matching workflow in this account in the current AWS Region. +Schema mappings | Each supported Region: 50 | [Yes](https://console.aws.amazon.com/servicequotas/home/services/entityresolution/quotas/L-00E43259) | The maximum number of schema mappings that you can create in this account in the current AWS Region. + +## API throttling quotas + +Resource | Rate limit | Description