Amazon Product Advertising API Developer's Manual page 70

Api version 2011-08-01
Table of Contents

Advertisement

Product Advertising API Developer Guide
5.
Rejoin the sorted parameter/value list with ampersands. The result is the canonical string that we'll
sign:
AWSAccessKeyId=00000000000000000000&ItemId=0679722769&Operation=I
temLookup&ResponseGroup=ItemAttributes%2COffers%2CImages%2CReview
s&Service=AWSECommerceService&Timestamp=2009-01-01T12%3A00%3A00Z&
Version=2009-01-06
6.
Prepend the following three lines (with line breaks) before the canonical string:
GET
webservices.amazon.com
/onca/xml
7.
The string to sign:
GET
webservices.amazon.com
/onca/xml
AWSAccessKeyId=00000000000000000000&ItemId=0679722769&Operation=I
temLookup&ResponseGroup=ItemAttributes%2COffers%2CImages%2CReview
s&Service=AWSECommerceService&Timestamp=2009-01-01T12%3A00%3A00Z&
Version=2009-01-06
8.
Calculate an RFC 2104-compliant HMAC with the SHA256 hash algorithm using the string above
with our "dummy" Secret Access Key: 1234567890 . For more information about this step, see
documentation and code samples for your programming language.
Nace+U3Az4OhN7tISqgs1vdLBHBEijWcBeCqL5xN9xg=
9.
URL encode the plus (+) and equal (=) characters in the signature:
Nace%2BU3Az4OhN7tISqgs1vdLBHBEijWcBeCqL5xN9xg%3D
10. Add the URL encoded signature to your request and the result is a properly-formatted signed request:
http://webservices.amazon.com/onca/xml?AWSAccessKeyId=00000000000
000000000&ItemId=0679722769&Operation=ItemLookup&ResponseGroup=It
emAttributes%2COffers%2CImages%2CReviews&Service=AWSECommerceServ
ice&Timestamp=2009-01-01T12%3A00%3A00Z&Version=2009-01-06&Signatu
re=Nace%2BU3Az4OhN7tISqgs1vdLBHBEijWcBeCqL5xN9xg%3D
Examples of Other Signed Requests
The previous section went through a detailed process for signing an ItemLookup request. This section
presents examples of unsigned requests, the string to sign generated from them, and the final signed
request. These examples can make excellent test cases for your software. All examples use the "dummy"
AWS access identifiers used earlier in the
Request Authentication
Steps to Sign the Example Request (p.
API Version 2011-08-01
63
62).

Advertisement

Table of Contents
loading

Table of Contents