Give the market its first developer:

aws iam create-user --user-name dana
aws iam create-access-key --user-name dana
aws iam create-group --group-name developers
aws iam add-user-to-group --group-name developers --user-name dana

Copy the key id and secret from the create-access-key answer into a dana profile with aws configure set … --profile dana, then:

aws sts get-caller-identity --profile dana
aws s3 ls --profile dana

The second command fails. Read the error code: it is the whole point of the next three lessons.