An access key ID with its matching secret access key and A password for signing in to the AWS Management Console are the credentials that can be directly associated with an IAM user. These two provide the programmatic and human sign in methods that IAM manages for individual users.

The An access key ID with its matching secret access key pair provides programmatic access to AWS APIs and SDKs and is created and rotated under the IAM user security credentials. These access keys are used by the AWS CLI and application code to authenticate as that IAM user.

The A password for signing in to the AWS Management Console lets a person sign in to the web console as the IAM user and can be required, allowed, or disabled by account policies and by federated or single sign on setups. The console password can be combined with MFA for stronger protection.

An Amazon EC2 key pair is not an IAM user credential because it is used to authenticate to EC2 instances over SSH or RDP and it is part of the compute access model rather than the IAM identity model.

An AWS Certificate Manager (ACM) certificate is used to provision and manage TLS certificates for endpoints and load balancers and is not issued as a login credential for an IAM user.

A local Linux server login password is an operating system credential that applies to a specific server and is unrelated to AWS IAM user credentials.

Full AWS Practitioner Certification Question