title: aws cli: invalid security token
body: <p>I'm trying to create a reusable delegation set to use as whitelisted nameservers for my domains, using aws cli on Mac OS X. My AWS credentials (those of an IAM profile I created for that purpose with full administrator privileges, an location set to us-east-1) were correctly entered during setup and accepted by the system.</p>
  
  <p>When entering the command</p>
  
  <pre><code>$ aws route53 create-reusable-delegation-set --caller-reference [CALLER-REFERENCE] --hosted-zone-id [HOSTED_ZONE] --generate-cli-skeleton
  </code></pre>
  
  <p>the request is successful and I get the response:</p>
  
  <pre><code>{
      "CallerReference": "", 
      "HostedZoneId": ""
  }
  </code></pre>
  
  <p>But when I remove --generate-cli-skeleton and enter</p>
  
  <pre><code>aws route53 create-reusable-delegation-set --caller-reference [CALLER-REFERENCE] --hosted-zone-id [HOSTED_ZONE]
  </code></pre>
  
  <p>I get this:</p>
  
  <pre><code>An error occurred (InvalidClientTokenId) when calling the CreateReusableDelegationSet operation: The security token included in the request is invalid.
  </code></pre>
  
  <p>I reality, my IAM credentials, despite being valid, and despite the profile I am using (donaldjenkins) having full administrator privileges, are refused systematically in all aws services and for all commands, not just Route53.</p>
  
  <p>I've been unable to pinpoint the cause of this despite extensive research. Any suggestions gratefully receieved.</p>