too many roles in AWS resulting in SAML error?

[Alan Buxey]

hi,

> One of the members of our cloud services team is in groups that grants 270+ roles in AWS.
> He has access if he is in <= 272 groups.


i'd guess the limit is not the number of the roles per se but on the
size of the SAML assertion?

https://aws.amazon.com/blogs/security/saml-identity-federation-follow-up-questions-materials-guides-and-templates-from-an-aws-reinvent-2016-workshop-sec306/

alan