To create a new user, go to your AWS account, then go to Services and select IAM. Then choose Users and click on Add user.
Give the user a name (for example, boto3user). Enable programmatic access. This will ensure that this user will be able to work with any AWS supported SDK or make separate API calls and press next permissions:
Press on Attach existing policies directly. To keep things simple, choose the preconfigured AmazonS3ReadOnlyAccess policy. With this policy, the new user will be able to have full control over S3. Click on Next: Review:
Select Create user:
A new screen will show you the user’s generated credentials. Click on the Download .csv button to make a copy of the credentials.