# Rate limits transcribed from the provider's own documentation — see provenance. Quoted, not derived.
generated: '2026-09-20'
method: searched
source: https://docs.cloud.google.com/armor/docs/rate-limiting-overview
sources:
- https://docs.cloud.google.com/armor/docs/rate-limiting-overview
provenance:
  tool: planning/api-economics/harvest_ratelimits.py
  run: 20260920T133210
  grounding: every limit_text was found verbatim in the fetched page text
published: true
note: Page describes user-configurable Cloud Armor rate-based rules rather than provider-imposed API limits.
  Exceed action status code is configurable (403, 404, 429, 502), with 429 Too Many Requests recommended,
  so no single status recorded.
limit_count: 3
limits:
- name: Default rate limiting security policy threshold
  limit_text: the default threshold is 500 requests during each one-minute interval
  limit: 500
  window: minute
  scope: unclear
- name: Throttle rate_limit_threshold_count maximum
  limit_text: The minimum value is 1 and the maximum value is 1,000,000.
  limit: 1000000
  scope: unclear
- name: Rate-based ban rate_limit_threshold_count maximum
  limit_text: The minimum value is 1 request and the maximum value is 10,000 requests.
  limit: 10000
  scope: unclear