1. Sign in as Admin on the AWS Console page
2. Under IAM, create a new user called eg. “vscope” with Access Type “Programmatic access”
3. On the second step of Add user, select “Attach existing policies directly” and check the AWS-inbuilt policy “ReadOnlyAccess“
4. Copy “Access key ID” and “Secret access key” into vScope

If you want to add an access key to an existing user. Go to:

IAM -> Users -> {user} -> Security Credentials tab -> Create access key