The present disclosure is drawn to methods and systems for resource enforcement in a distributed system. At least one first host of the system has an enforcement agent configured to trigger a master enforcement controller in response to the first host running a task requiring access to a distributed resource. The master enforcement controller obtains identification information regarding the distributed resource and transmits an enforcement command to other hosts of the distributed system involved in providing the distributed resource. The enforcement command is received by enforcement agents on each of the involved hosts and triggers a slave enforcement controller on each of the involved hosts. The slave enforcement controllers locally enforce a resource quota for the distributed resource.