General
AWS security token included an invalid client token ID
InvalidClientTokenId
AWS could not validate the access key or token identifier in the request, which usually means the credentials are wrong, inactive, or belong to a different context.
Error AtlasError Documentation and ResolutionObserved message
InvalidClientTokenId
Why it happens
- The access key ID is incorrect or no longer active.
- Temporary credentials are incomplete or missing the matching session token.
- The CLI, SDK, or environment is using the wrong profile.
How to fix it
- Verify the active profile and credential source used by the request.
- Refresh temporary credentials if a session token is required.
- Replace invalid or inactive credentials with a valid key set.
Official reference
AWS Support API Reference: Common ErrorsRelated errors
Explore more