As a workaround, add the security principals to security groups to reduce the overall number of security principals that are in the Allowed list