backport of commit ac1e919 (#24523)

Co-authored-by: benz0 <benz0@benz0.com>
hashicorp · Dec 21, 2023 · 8993802 · 8993802
1 parent 5092a46
commit 8993802
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/website/content/docs/secrets/aws.mdx b/website/content/docs/secrets/aws.mdx
@@ -483,6 +483,15 @@ See http://docs.aws.amazon.com/STS/latest/APIReference/API_GetFederationToken.ht
 Vault 0.5.1 or later is recommended when using STS tokens to avoid validation
 errors for exceeding the AWS limit of 32 characters on STS token names.
 
+<Note title="AWS character limit includes path">
+
+  The AWS character limit for token names **includes** the full path to
+   the token. For example, `aws/sts/dev005_vault-test_testtest` (34
+   characters) exceeds the limit , but `aws/roles/dev005_vaulttest-test` (31
+   characters) does not.
+
+</Note>
+
 ### AWS instance metadata timeouts
 
 @include 'aws-imds-timeout.mdx'