AWS STS now enforces a single 4,096-byte size limit on session tokens and returns response elements indicating token size and utilization relative to the limit
AWS security token service (STS) has unified session token size limits to a single 4,096 bytes, increasing flexibility for combining session policies and tags. STS now returns response elements showing token size and usage limits, which are logged to AWS cloudtrail and published as metrics to Amazon cloudwatch. A new optional API parameter allows generating larger tokens up to 4,096 bytes to test application and infrastructure handling. These features are available in all commercial AWS regions, AWS govcloud (US) regions, and AWS european sovereign cloud regions.
Why it matters
This update to AWS STS affects all AWS users who manage security tokens