Apple requires that any apps accessing iCloud accounts use application-specific passwords.

To set up an iCloud e-mail within Aqua Mail use Apple's support guide located 
here.

When adding an account (use "Other") in Aqua Mail instead of your normal password, use the one you have just generated.