project

AWS Security Token Service

The AWS service that issues temporary security credentials (an access key ID, a secret access key and a session token) through APIs such as AssumeRole, AssumeRoleWithSAML and GetFederationToken.

Current clusters

build1 publisher

MinimumSessionTokenSize inflates an STS session token until your own stack refuses it

AWS collapsed two STS size limits into one 4,096-byte cap and now reports the assembled token's actual size in API responses, CloudWatch and CloudTrail, with a new parameter that pads tokens for testing.

Publishers:aws.amazon.com

Reality

Evidence68
Adoption30
Hype gap+8
Incentives70
Confidence62