Even then the max session is 12 hours which can be cumbersome, though we've made it work using an IdP into AWS SSO.

12 hours is typically enough but, for the days it isn't (i.e. something breaks and I'm working over time), it becomes tiresome.