iam:CreateAccessKey policy

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Effect": "Allow",
           "Action": [
               "iam:CreateAccessKey",
               "iam:ListAccessKeys"
           ],
           "Resource": "arn:aws:iam::YOUR_ACCOUNT_ID:user/${aws:username}"
       }
   ]
}

You need permissions
You do not have the permission required to perform this operation. Ask your administrator to add permissions. Learn more
User: arn:aws:iam::0987654321:user/USERNAME is not authorized to perform: iam:CreateAccessKey on resource: user USERNAME because no identity-based policy allows the iam:CreateAccessKey action

Related

• SelfManageCredentials
• aws iam create-access-key

See also

• AWS Access Keys: aws iam [create-access-key | list-access-keys | get-access-key-last-used ]
• AWS Access Keys, aws iam create-access-key
• iam:, iam:PassRole, iam:CreateAccessKey, iam:ListAccessKeys, SelfManageCredentials