Because I didn't see any other posts that specifically asked this question phrased in this way, I thought I might ask.
An example of "too many requests" might be a malicious user altering the client-side code so that it creates a new user (stored in Firecloud) as frequently as possible.