aws cli: invalid security token
<p>I'm trying to create a reusable delegation set to use as whitelisted nameservers for my domains, using aws cli on Mac OS X. My AWS credentials (those of an IAM profile I created for that purpose with full administrator privileges, an location set to us-east-1) were correctly entered during setup and accepted by the system.</p>

<p>When entering the command</p>

<pre><code>$ aws route53 create-reusable-delegation-set --caller-reference [CALLER-REFERENCE] --hosted-zone-id [HOSTED_ZONE] --generate-cli-skeleton
</code></pre>

<p>the request is successful and I get the response:</p>

<pre><code>{
    "CallerReference": "", 
    "HostedZoneId": ""
}
</code></pre>

<p>But when I remove --generate-cli-skeleton and enter</p>

<pre><code>aws route53 create-reusable-delegation-set --caller-reference [CALLER-REFERENCE] --hosted-zone-id [HOSTED_ZONE]
</code></pre>

<p>I get this:</p>

<pre><code>An error occurred (InvalidClientTokenId) when calling the CreateReusableDelegationSet operation: The security token included in the request is invalid.
</code></pre>

<p>I reality, my IAM credentials, despite being valid, and despite the profile I am using (donaldjenkins) having full administrator privileges, are refused systematically in all aws services and for all commands, not just Route53.</p>

<p>I've been unable to pinpoint the cause of this despite extensive research. Any suggestions gratefully receieved.</p>