# Limits and Quotas

## Limits
<!--- Template Guidance 
A table with hard system limits of the service.
The difference with quotas is that these cannot be raised at all.
--->

Exoscale automatically provisions a default Key Management Service (KMS) key for all organizations. This key is fully managed by Exoscale and automatically replicated across all zones.

The following hard limitations apply to default keys:
- They cannot be deleted.
- Custom keys cannot use the reserved name of a default key.
- They cannot be disabled.
- Automatic key rotation for default keys cannot be disabled.

<!--- Template Guidance 
If there are additional specific limitations, describe below the table.
--->

Additionally, the number of manual key rotations permitted for any single KMS key is strictly limited to 10. This is a system limit and cannot be modified.


## Quotas
<!--- Template Guidance 
A table with the quotas of the service.
--->

| Usage                                                  | Quota                  |
|--------------------------------------------------------|------------------------|
| Maximum number of Keys per org per zone                          | 1000           |


> [!NOTE]
> Key replicas within a replicated key set do not count toward your quota; only the primary key is counted.