Kiro subscription creation fails with "Your account is not authorized to make this call"

I am unable to create a new Kiro subscription for users in my AWS account.

The Kiro console returns:

Failed to create Kiro subscription for 1 user Your account is not authorized to make this call.

The account previously had a working Kiro subscription. The issue started after the existing subscription was deleted and I attempted to assign a new subscription.

I have verified and recreated the relevant AWS configuration:

AWS Region: us-east-1 IAM Identity Center: Organization instance Identity-enhanced console sessions: Enabled Amazon Q trusted access through AWS Organizations: Enabled AWSServiceRoleForUserSubscriptions: present AWSServiceRoleForAmazonQDeveloper: present Customer-managed KMS key: enabled KMS key policy allows Kiro service principal q.amazonaws.com to perform the required kms:Decrypt operations Kiro profile is present Kiro/AWS startup credits are available Tested using the AWS Root user — same error Tested using an IAM user with AdministratorAccess and AmazonQDeveloperAccess — same error I also recreated the IAM Identity Center/organization configuration, but the same error persists