AWS changes STS token limits and adds size monitoring

Image: Primary

Published Tuesday, September 15, 2026 · 7:07 PM EDT

AWS has replaced separate packed-policy and overall session-token limits in AWS Security Token Service with a single 4,096-byte token limit. STS now returns token-size and utilization fields in successful API responses, records them in CloudTrail, and publishes size metrics to CloudWatch. A new MinimumSessionTokenSize parameter lets customers test how large a token their systems can accept. Existing error handling remains compatible because oversize tokens still return PackedPolicyTooLargeException.

Sources

AWS Security Blog

In this story

Amazon

Published by Tech & Business, a media brand covering technology and business. This story was sourced from AWS Security Blog and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

AI Infrastructure

Five technology giants commit more than $3T to future spending

Alphabet, Meta, Microsoft, Amazon and Oracle have committed more than $3T to future spending on data centres, leases, equipment and energy, The Next Web reported, citing Bloomberg. Alphabet accounts for more than $1T and Meta for more than $800B.

Infrastructure Science

Quilty Space projects shortfall of about 150 launches through 2030

The world outside China faces a shortfall of about 150 rocket launches through 2030 against demand from satellite operators and civil space agencies, analytics firm Quilty Space estimates in a new report.

AI Security

AWS makes OpenAI's Daybreak Red available to eligible GovCloud customers

AWS says OpenAI's Daybreak Red: GPT-5.6 Cyber is now available to eligible customers through Amazon Bedrock in AWS GovCloud (US-East).

AI Infrastructure

AWS says ChatGPT desktop app is available through Bedrock in GovCloud

AWS says the ChatGPT desktop app is now available through Amazon Bedrock in AWS GovCloud (US), giving organizations access to OpenAI models for multistep tasks and software development.

Infrastructure Products

AI infrastructure spending pushes three technology giants into negative cash flow

Alphabet, Amazon and Meta reported negative free cash flow as infrastructure spending rose, TechCrunch reported. Alphabet recorded negative $9.1 billion in the third quarter, Meta negative $2.1 billion, and Amazon negative $42.4 billion over the past 12 months.

Science Infrastructure

CloudFront adds headers for viewer networks and post-quantum connections

Amazon says CloudFront can now forward optional headers that identify a viewer's internet service provider and describe the cryptography used on the viewer's connection. Website operators can use them to analyze traffic by network and measure use of post-quantum cryptography.