When accessing cloud services programmatically, users often employ tokens or keys, which may not automatically update following a credential reset. Since the user can log in through the web interface, this implies their updated credentials are active. However, for programmatic access, if the token or key wasn't refreshed post credentials update, it would result in access denial, which is what the user is experiencing. Incorrect password would not be an issue here, as the user can access the web interface. A widespread service misconfiguration would likely affect more than one user and more than just programmatic access. Expired SSL certificates might impair access, but the symptoms would typically be related to trust issues and affect all users attempting to access the service programmatically.