Iam:CreateAccessKey policy

You need permissions
You do not have the permission required to perform this operation. Ask your administrator to add permissions. Learn more
User: arn:aws:iam::0987654321:user/USERNAME is not authorized to perform: iam:CreateAccessKey on resource: user USERNAME because no identity-based policy allows the iam:CreateAccessKey action

Related

• SelfManageCredentials
• aws iam create-access-key

See also

• aws iam [ create-user, create-group, get-user, list-users | list-policies | list-attached-user-policies | attach-user-policy | list-attached-user-policies | list-roles | get-account-summary | put-group-policy | put-role-policy | put-user-policy | create-login-profile | aws iam delete-virtual-mfa-device | aws iam list-virtual-mfa-devices | aws iam create-saml-provider | aws iam list-account-aliases | aws iam create-role | aws iam change-password| enable-mfa-device | list-instance-profiles