IAM users are still needed in large orgs because of legacy tooling that only accepts access key ID / secret access key sigh.