bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Wednesday, September 16, 2026

AWS STS Bumps Session Token Limit to 4KB and Adds Monitoring Tools

AWS Security Token Service now unifies session token size limits to a single 4,096-byte cap, giving you more room to pack policies and tags together without juggling separate restrictions. You'll get real-time token size metrics in CloudWatch and CloudTrail logs, plus a test parameter to verify your apps handle the larger tokens—all available across commercial AWS regions, GovCloud, and the European Sovereign Cloud.

source: [aws/whats-new]