AWS STS Bumps Up Session Token Size Limits
AWS Security Token Service just ditched the confusing dual token size limits and consolidated everything into a single 4,096-byte cap, giving you way more breathing room for policies and tags. Cloud engineers can now monitor token sizes directly in API responses, making it easier to spot bloat before it becomes a problem.
source: [aws/security-blog]