Authentication Parameters
The following parameters are used by Product Advertising API for REST authentication:
• Signature—Required. There is no default value. A signature is created by using the request type,
domain, the URI, and a sorted string of every parameter in the request (except the Signature parameter
itself) with the following format
<parameter>=<value>&
. Once properly formatted, you create a
base64-encoded HMAC_SHA256 signature using your AWS secret key. For a detailed example of this
process, see
Example REST Requests (p. 61)
.
• Timestamp—Required. There is no default value. The time stamp you use in the request must be a
dateTime
object, with the complete date plus hours, minutes, and seconds (for more information, go
to
http://www.w3.org/TR/NOTE-datetime
).This is a fixed -length subset of the format defined by ISO
8601, represented in Universal Time (GMT):
YYYY-MM-DDThh:mm:ssZ
(where T and Z are literals).
Important
If you are using .NET you must not send overly specific time stamps, due to different
interpretations of how extra time precision should be dropped. To avoid overly specific time
stamps, manually construct
dateTime
objects with no more than millisecond precision.
Related Topics
•
Your AWS Identifiers (p. 54)
Basic Authentication Process
The following figures and text describe the series of tasks required to authenticate requests to AWS using
an HMAC-SHA request signature. It is assumed you have already created an AWS account and received
an Access Key ID and Secret Access Key. For more information about those, see
Your Product Advertising
API Account (p. 54)
and
Your AWS Identifiers (p. 54)
.
You perform the first three tasks.
Process for Authentication: Tasks You Perform
You construct a request to AWS.
1
API Version 2011-08-01
56
Product Advertising API Developer Guide
Request Authentication
