Temporary quote restriction on certain resources in certain regions

Kenny Kawahara 61 Reputation points
2026-10-19T17:26:56.1066667+00:00

We deploy workloads in different regions that rely on several resource types using terraform. In particular, Azure Container Apps, Postgres Flexible Server, and Application Gateway. We have not yet reached our prescribed/requested quotas for these services in our Subscription.

However, we will often get messages that one of these services has a temporary quota restriction which prevents completion of the deployment. We aren't able to know about the temporary restriction until after we attempt the deployment which can take 30min to an hour or slightly more before we run into the issue. Our only course of action then, is to attempt a different region and hope that one of those 3 resource types isn't also experiencing a temporary quota restriction.

My question is - is there some query I can run or otherwise some other Azure reporting location where I can lookup these temporary restrictions before attempting deployment. It would save valuable time and prevent unneeded frustration.

Azure Container Apps
Azure Container Apps

An Azure service that provides a general-purpose, serverless container platform.


2 answers

Sort by: Newest
  1. Alex Burlachenko 26,695 Reputation points MVP Volunteer Moderator
    2026-10-22T10:47:59.9333333+00:00

    Hi Kenny Kawahara & thx for join me at Q&A platform,

    ur describing sounds more like temporary regional capacity or service-side allocation restrictions than a normal subscription quota issue. And unfortunately, those are two different things in Azure.

    Your subscription can have plenty of unused quota while Azure temporarily prevents new deployments of a particular resource type in a specific region. This can happen because of backend capacity constraints, infrastructure availability, or service-specific provisioning restrictions.

    As far as I'm aware, Azure doesn't provide a single public API or dashboard that reliably exposes all temporary deployment restrictions across services and regions before u attempt provisioning. The Azure Quotas API shows subscription limits and usage, but it doesn't provide real-time capacity guarantees for Azure Container Apps, PostgreSQL Flexible Server, or Application Gateway.

    There are some partial checks available. For PostgreSQL Flexible Server, the regional SKU availability API can help identify supported configurations and certain subscription-level restrictions. Azure Resource Graph can inventory existing resources, while Azure Service Health can report known regional incidents. However, none of these reliably confirms that a new resource can actually be allocated at that moment.

    Terraform's plan command won't catch these issues either, bc it validates the proposed infrastructure changes without reserving regional capacity. Even an ARM deployment validation or what-if operation doesn't guarantee that the resources will be available when provisioning starts.

    For a multi-region deployment pipeline, I'd recommend adding a pre-deployment eligibility check where the resource provider exposes one, followed by retry logic with exponential backoff and a predefined regional fallback strategy. That won't eliminate every failed deployment, but it can reduce the amount of manual intervention.

    The fact that ur deployments can run for 30–60 minutes before returning a temporary restriction is particularly frustrating. I'd raise this with Azure support and ask whether the specific errors are caused by regional capacity, subscription-level allocation restrictions, or a resource provider issue. Include the exact error codes, affected regions, resource SKUs, and deployment correlation IDs.

    I'd also ask Microsoft whether these restrictions can be exposed through a supported availability API or surfaced earlier during ARM deployment validation. That would be a pretty valuable improvement for customers managing infrastructure through Terraform.

    One question tho: what exact error codes are u receiving for Container Apps, PostgreSQL, and Application Gateway? If they're all reporting the same generic quota message, that's one scenario. If they're returning different capacity or allocation errors, there may be service-specific checks we can use to catch at least some of them before deployment.

    rgds,

    Alex

    p.s. if my answer is help - pls mark it as an answer

    Was this answer helpful?

    0 comments No comments

  2. Likhitha Sulake 190 Reputation points Microsoft External Staff Moderator
    2026-10-21T17:43:47.53+00:00

    Hi @Kenny Kawahara ,
    Please first verify your subscription quota and Azure Service Health for the intended region. If quota is available but the deployment reports a regional capacity restriction, capture the exact error, region, resource/SKU, UTC timestamp, and correlation/request ID.

    For Container Apps, regional capacity limitations are separate from subscription quota, so increasing quota will not resolve a regional capacity constraint. If your architecture permits, retry later or attempt deployment in another supported region. For automated Terraform deployments, consider implementing bounded retries with increasing delays.

    Please note that there is not currently a customer-facing query that can guarantee available capacity for these resources in a region before the allocation attempt.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.