AWS Security ChangesHomeSearch

AWS prometheus documentation change

Service: prometheus · 2026-06-13 · Documentation low

File: prometheus/latest/userguide/AMP_quotas.md

Summary

Added documentation for Native Histogram quotas including bucket count limits, active series limits, ingestion rate limits, and validation requirements for schema/size

Security assessment

The changes introduce operational quotas and validation rules for Native Histogram data. While they enforce data integrity by discarding invalid samples (schema out of range or oversized), there's no evidence of addressing a specific security vulnerability or weakness. The changes are operational improvements rather than security fixes.

Diff

diff --git a/prometheus/latest/userguide/AMP_quotas.md b/prometheus/latest/userguide/AMP_quotas.md
index b202dd317..3bbacd3b6 100644
--- a//prometheus/latest/userguide/AMP_quotas.md
+++ b//prometheus/latest/userguide/AMP_quotas.md
@@ -40,0 +41 @@ Labels per metric series | Each supported Region: 150 |  [Yes](https://console.a
+Max Native Histogram bucket count | Each supported Region: 200 | No | The maximum total number of buckets allowed in a Native Histogram sample. The resolution of a histogram with more buckets will be reduced until the number of buckets is within the limit.  
@@ -42,0 +44,2 @@ Metadata per metric | Each supported Region: 10 | No | The number of metadata pe
+Native Histogram active series per workspace | Each supported Region: 5,000,000 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/aps/quotas/L-EDA8C93C) | The number of unique Native Histogram active series per workspace. A series is active if a sample has been reported in the past 2 hours. The limit is automatically adjusted to be 10-percent of the workspaces active series limit, or the default, whichever is greater.  
+Native Histogram ingestion rate per workspace | Each supported Region: 166,666 |  [Yes](https://console.aws.amazon.com/servicequotas/home/services/aps/quotas/L-E8D7B0D8) | Native Histogram sample ingestion rate per workspace per second. The limit is automatically adjusted to be 10-percent of the workspaces ingestion rate limit, or the default, whichever is greater.  
@@ -123,0 +127,4 @@ Amazon Managed Service for Prometheus also has the following additional requirem
+  * Native histogram samples must have a schema value between -4 and 8. Samples with a schema outside this range are discarded.
+
+  * Native histogram samples must not exceed 2048 bytes in size. Samples that exceed this limit are discarded.
+