Can a full-access IAM user create other IAM users and resources?

Yes. An IAM user with full access can be used to create other users, groups, roles, and resources with attached policies, that's exactly what AWS recommends.