Question

Who can create and manage access keys in an AWS account?

Answer 1

Only the AWS account owner can manage the access keys for the root account. The account owner and IAM users or roles that have been granted the necessary permissions can manage access keys for IAM users.