AccessDeniedException

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

Linux 7.0.0-30-generic - Ubuntu 24.04.4 LTS

### Expected behaviour

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Actual behaviour

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Steps to reproduce

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Environment

```yaml

[q-details]
version = "1.19.7"
hash = "b654a1beb880951dd2343120bb867659622eecd9"
date = "2025-11-15T20:13:03.579285Z (283d ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i5-10310U CPU @ 1.70GHz"
total-cores = 4
memory = "15.40 GB"

[system-info.os.linux]
kernel_version = "7.0.0-30-generic"
id = "ubuntu"
name = "Ubuntu"
pretty_name = "Ubuntu 24.04.4 LTS"
version_id = "24.04"
version = "24.04.4 LTS (Noble Numbat)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.21"
terminal = "Gnome Terminal"
install-method = "unknown"

[env-vars]
DISPLAY = ":0"
PATH = "/home/USER/.local/bin:/home/USER/.opencode/bin:/snap/android-studio/236/jbr/bin:/usr/lib/jvm/java-17-openjdk-amd64/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.local/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.local/bin:/home/USER/.opencode/bin:/snap/android-studio/236/jbr/bin:/usr/lib/jvm/java-17-openjdk-amd64/bin:/home/USER/.nvm/versions/node/v24.15.0/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.local/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.nvm/versions/node/v24.15.0/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin"
QTERM_SESSION_ID = "22e137d0ec2b47958a3574972a396b8e"
QT_IM_MODULE = "ibus"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "1.19.7"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_CURRENT_DESKTOP = "ubuntu:GNOME"
XDG_SESSION_DESKTOP = "ubuntu"
XDG_SESSION_TYPE = "wayland"
XMODIFIERS = "@im=ibus"
```

Beginne bei crates/chat-cli/src/cli/chat/mod.rs:1149 und reproduziere den Fehler mit den gemeldeten Prüfungen für q doctor und q restart. Verfolge, welche Anfrage AccessDeniedException zurückgibt, und überprüfe den zutreffenden AWS-Autorisierungskontext. Das Issue enthält keinen konkreten Fix und kein Abnahmekriterium; der Abschluss ist daher nicht über die Ermittlung und Behebung des nicht autorisierten Aufrufs hinaus definiert.

Vom Indexierungsmodell aus dem Issue-Text verfasst.