Skip to content
Last updated

Rate Limits for IAM APIs

Overview

HPE GreenLake Cloud Platform's Identity and Access Management (IAM) service enforces rate limits on API requests to ensure system stability, prevent abuse, and maintain service performance for all users. This document outlines the current rate limits for various IAM operations.

Unless otherwise noted, rate limits are applied independently per HPE subject principal (authenticated user or service account). Exceeding these limits may result in your requests being temporarily rejected with a 429 (Too Many Requests) HTTP status code.

Best Practices

  • Implement retry logic with exponential backoff in your applications to handle rate limit errors gracefully
  • Cache frequently accessed data to reduce the number of API calls
  • Batch operations when possible instead of making multiple individual requests

Rate Limit Headers

IAM APIs typically include rate limit information in response headers to help clients manage their request rates effectively. These headers provide visibility into your current rate limit status:

Response HeaderDescription
X-RateLimit-LimitThe maximum number of requests allowed in the current time window
X-RateLimit-RemainingThe number of requests remaining before hitting the rate limit
X-RateLimit-ResetThe time in seconds until the rate limit window resets

Example Response Headers

HTTP/1.1 200 Ok
Content-Type: application/json
X-RateLimit-Limit: 100
X-Ratelimit-Remaining: 0
X-Ratelimit-Reset: 48

In this example, the client has reached their rate limit (0 remaining requests) and will need to wait 48 seconds before the quota resets.

API-Specific Rate Limits

This section details the specific rate limits for different IAM API endpoints.

Organization API Rate Limits

DescriptionHTTP Method and PathLimit
Add an organizationPOST /organizations/v1alpha1/organizations1 request per second
List organizationsGET /organizations/v1alpha1/organizations5 requests per minute
Retrieve organization by IDGET /organizations/v1alpha1/organizations/{orgId}100 requests per minute
Update an organizationPATCH /organizations/v1alpha1/organizations/{orgId}1 request per second

User Management API Rate Limits

DescriptionHTTP Method and PathLimit
Invite user to organizationPOST /organizations/v1alpha1/users/invite-user1 request per second
Returns supported methodsOPTIONS /organizations/v1alpha1/users/invite-user100 requests per minute

Workspace API Rate Limits

DescriptionHTTP Method and PathLimit
Create a workspace linked to an organizationPOST /organizations/v1alpha1/workspaces1 request per second
List workspacesGET /organizations/v1alpha1/workspaces5 requests per minute
Update a workspacePATCH /organizations/v1alpha1/workspaces/{id}1 request per second
Get a workspaceGET /organizations/v1alpha1/workspaces/{id}20 requests per minute

Feedback

We continuously improve our documentation and services based on your feedback. If you have suggestions regarding these rate limits or documentation, please submit feedback through the HPE GreenLake portal feedback mechanism.