APIM Limits Picker · Infra Atlas

Numeric thresholds

Minimum backend timeout ≥ 30 s

Minimum request payload ≥ 10 MB

Capabilities

mTLS (client cert auth)— B2B / zero-trust gRPC support— passthrough or transcoding GraphQL passthrough— proxy GraphQL endpoints OAuth 2.0 Client Credentials— native token issuance Self-hostable— run in your own VPC / cluster

✓ native · ⚠ partial / with caveats · ✕ does not clear the bar

Most of these are operator-set, not vendor-imposed. The numeric thresholds here are the headline maximum each vendor will let you raise to — not their default. Anything beyond the platform ceiling is a hard wall (e.g. AWS's 10 MB payload, 30 s HTTP API timeout) and cannot be raised. "Configurable" vendors will let you go as high as your backend tolerates. Always read the full footnote in the APIM Matrix before committing.