Bedrock returns "Error 002: Access to Bedrock models is not allowed for this account" despite model being ACTIVE, AUTHORIZED, and IAM permissions being allowed

I am getting the following error when trying to use Amazon Bedrock:

ValidationException: Error 002: Access to Bedrock models is not allowed for this account

I am trying to use Amazon Nova 2 Lite in us-east-1 with:

us.amazon.nova-2-lite-v1:0

I have already checked the following:

• Model is ACTIVE
• authorizationStatus is AUTHORIZED
• entitlementAvailability is AVAILABLE
• regionAvailability is AVAILABLE
• Inference profile is ACTIVE
• IAM user has AdministratorAccess
• IAM policy simulation shows bedrock:InvokeModel as allowed
• Account is not part of AWS Organizations
• Service quotas are available

I also tested directly from the AWS CLI:

aws bedrock-runtime converse `
  --region us-east-1 `
  --model-id us.amazon.nova-2-lite-v1:0 `
  --cli-input-json file://test-message.json

and get the same Error 002.

The Bedrock Playground also gives the same error, so this does not appear to be an issue with my application or Bedrock AgentCore.

I also tried amazon.nova-lite-v1:0 and amazon.nova-micro-v1:0, with the same result.

The old Model Access page is now deprecated, and the model availability API shows the account as authorized.

Could anyone confirm what "Error 002: Access to Bedrock models is not allowed for this account" specifically means and whether this indicates an account-level restriction/entitlement issue that needs to be resolved by AWS Support?

This is currently blocking my application deployment.