AWS STS simplifies session token size limits and adds session token size monitoring
AWS STS now enforces a single 4,096-byte size limit on session tokens and returns response elements indicating token size and utilization, enabling larger combinations of session policies and tags.
AWS security token service (STS) now unifies session token size limits to a single 4,096 bytes, allowing larger session policies and tags by removing previous separate limits for tokens and parameters. It returns response elements showing token size and usage, logged in AWS cloudtrail and exposed as cloudwatch metrics. A new optional API parameter lets you generate larger tokens up to 4,096 bytes to test application and infrastructure handling. These features are available in all commercial AWS regions, AWS govcloud (US), and AWS european sovereign cloud regions.
Why it matters
This update affects all AWS users managing security tokens, improving flexibility and monitoring for session management.