AccessDeniedException

### Checks

- [x] I have searched [github.com/aws/amazon-q-developer-cli/issues](https://github.com/aws/amazon-q-developer-cli/issues?q=) and there are no duplicates of my issue
- [x] I have run `q doctor` in the affected terminal session
- [x] I have run `q restart` and replicated the issue again

### Operating system

Linux 7.0.0-30-generic - Ubuntu 24.04.4 LTS

### Expected behaviour

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Actual behaviour

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Steps to reproduce

Amazon Q is having trouble responding right now:
0: Failed to send the request: An unknown error occurred: AccessDeniedException
1: An unknown error occurred: AccessDeniedException
2: unhandled error (AccessDeniedException)
3: service error
4: unhandled error (AccessDeniedException)
5: Error { code: "AccessDeniedException", message: "User is not authorized to make this call.", aws_request_id: "cc4dddb2-31b6-4a1e-bf77-a8b09d55f3eb" }

Location:
crates/chat-cli/src/cli/chat/mod.rs:1149

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.

### Environment

```yaml

[q-details]
version = "1.19.7"
hash = "b654a1beb880951dd2343120bb867659622eecd9"
date = "2025-11-15T20:13:03.579285Z (283d ago)"
variant = "minimal"

[system-info]
chip = "Intel(R) Core(TM) i5-10310U CPU @ 1.70GHz"
total-cores = 4
memory = "15.40 GB"

[system-info.os.linux]
kernel_version = "7.0.0-30-generic"
id = "ubuntu"
name = "Ubuntu"
pretty_name = "Ubuntu 24.04.4 LTS"
version_id = "24.04"
version = "24.04.4 LTS (Noble Numbat)"

[environment]
cwd = "/home/USER"
cli-path = "/home/USER"
os = "Linux"
shell-path = "/usr/bin/bash"
shell-version = "5.2.21"
terminal = "Gnome Terminal"
install-method = "unknown"

[env-vars]
DISPLAY = ":0"
PATH = "/home/USER/.local/bin:/home/USER/.opencode/bin:/snap/android-studio/236/jbr/bin:/usr/lib/jvm/java-17-openjdk-amd64/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.local/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.local/bin:/home/USER/.opencode/bin:/snap/android-studio/236/jbr/bin:/usr/lib/jvm/java-17-openjdk-amd64/bin:/home/USER/.nvm/versions/node/v24.15.0/bin:/home/USER/.nvm/versions/node/v18.20.8/bin:/home/USER/.local/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.nvm/versions/node/v24.15.0/bin:/home/USER/.local/share/solana/install/active_release/bin:/home/USER/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin:/snap/bin"
QTERM_SESSION_ID = "22e137d0ec2b47958a3574972a396b8e"
QT_IM_MODULE = "ibus"
Q_SET_PARENT_CHECK = "1"
Q_TERM = "1.19.7"
SHELL = "/bin/bash"
TERM = "xterm-256color"
XDG_CURRENT_DESKTOP = "ubuntu:GNOME"
XDG_SESSION_DESKTOP = "ubuntu"
XDG_SESSION_TYPE = "wayland"
XMODIFIERS = "@im=ibus"
```

Comienza en crates/chat-cli/src/cli/chat/mod.rs:1149 y reproduce el fallo con las comprobaciones indicadas de q doctor y q restart. Traza qué solicitud devuelve AccessDeniedException y verifica el contexto de autorización de AWS aplicable. El issue no proporciona ninguna corrección concreta ni criterio de aceptación, por lo que la finalización no está definida más allá de determinar y abordar la llamada no autorizada.

Escrito por el modelo de indexación a partir del texto del issue.