Managing S3 quotas

You can define quotas to limit object storage usage at the following levels:

  • For an entire domain

    Limits the total S3 storage capacity available to the domain as a whole. This quota applies to all projects and all S3 users within the domain. When the domain quota is reached, no additional S3 capacity can be consumed by any project or user in that domain.

  • Per project

    Limits the total S3 storage capacity that can be used by a specific project. This quota applies to all S3 users created inside the project. It ensures that one project cannot consume more storage than allocated, even if capacity is still available at the domain level.

  • Per domain S3 user

    Limits the storage capacity that an individual domain S3 user can consume. This quota applies only to that user's buckets and objects within the domain. It allows fine-grained control over storage usage for self-service users.

  • Per project S3 user

    Limits the storage capacity that an individual S3 user within a project can consume. This quota applies only to that user's data within the project and provides additional control inside the project scope.

When multiple quotas are configured, the most restrictive quota applies. For example, if both a domain quota and a project quota are set, storage usage cannot exceed either limit.

By default, all S3 quotas are set to zero, which means "unlimited".