When you first create an Amazon Web Services (AWS) account, you begin with a single sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account root user. You can sign in as the root user using the email address and password that you used to create the account.
This is a highly privileged account and not recommended for usage beyond configuring initial account and billing settings, an initial set of users, and locking it down.
Before proceeding with the OpenShift install, you should create a IAM administrative user following the steps outlined here:
AWS: Creating an IAM User in Your AWS Account
In this step, you identify the IAM user name. We require programmatic access to AWS (via generated access key), check this box.
Many permissions are required by the AWS installer. A specific set of policies and services will be identified at a future date so a specific policy can be created and attached. Until then, attach the predefined "AdministratorAccess" for the installation to use.
Step 3 is optional and we’ll skip it.
Step 4 allows us to review the settings we've selected. Make sure your screen reflects your chosen name and AdministratorAccess
In Step 5, you need to save the access key ID and secret access key values to configure your local machine to run the installer. This step is your only opportunity to collect those values.