How do I increase my web ACL capacity units for AWS WAF?

Last updated: 2022-07-29

I want to increase my web ACL capacity units (WCU). How can I do this?

Resolution

AWS WAF Web ACL capacity units (WCU) calculate and control the operating resources required to run your rules, rule groups, and web ACLs. The default quota per account per Region for a web ACL is 1,500. If you need more capacity, you can request a WCU quota increase.

Important: It's a best practice to first deploy AWS WAF without exceeding the 1,500 WCU quota. After your AWS WAF rules, rule groups, and web ACL are created, request a WCU quota increase for the web ACL. After the increase is approved, you can add more rules to your AWS WAF policy.

Request a WCU quota increase

Note: WCU quota increases are approved per web ACL and can’t be approved at the account or AWS Organization level. The web ACL must exist first because quota increases apply only to existing web ACLs.

To request an increase for a web ACL that's expected to exceed more than 1,500 WCUs, do the following:

  1. Open the Service Quotas dashboard.
  2. In the navigation pane, choose AWS Services.
  3. In AWS services, enter AWS WAF.
  4. In Quota name, choose Maximum number of web ACL capacity units in a web ACL in WAF for regional or Maximum number of web ACL capacity units in a web ACL in WAF for CloudFront.
  5. Choose Request quota increase.
  6. In Change quota value, enter the value of WCU that you want your quota to be increased to, and then choose Request.

Then, to minimize the approval time, do the following:

  1. Open the AWS Support Center.
  2. In Open support cases, choose the open support case with a Subject of Limit Increase: WAF.
  3. In Correspondence, choose Reply.
  4. Provide the following information, and then choose Submit.
    A description of your use case that requires increasing WCU.
    The Amazon Resource Name (ARN) of the AWS WAF web ACL that you want to have its WCU limit increased and its planned WCU usage.

If your request is approved, you can use the increased WCU immediately. However, it might still show a maximum of 1,500 WCU on the AWS WAF console.

Note: Requests for quota increases are subject to review by AWS engineering teams. Quota increase requests aren't processed immediately after you submit a request. You will receive an email after your request is processed.


Did this article help?


Do you need billing or technical support?