Hacker News Reader

Not using access keys- although using the cli you could create a user which does have the ability to login to the portal.

Untrue, any valid access key pair set can call “GetSignInToken” and access the aws console.