Amazon Product Advertising API Developer's Manual page 77

Product Advertising API Developer Guide
<wsu:Created>2011-09-24T10:57:35Z</wsu:Created>
<wsu:Expires>2011-09-24T11:02:35Z</wsu:Expires>
</wsu:Timestamp>
</wsse:Security>
</SOAP-ENV:Header>
Requirements for BinarySecurityToken and Signatures
The EncodingType attribute for the BinarySecurityToken element must be:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-secur
ity-1.0#Base64Binary
The ValueType attribute for the BinarySecurityToken element must be:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-
1.0#X509v3
or:
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-
1.0#X509PKIPathv1
The BinarySecurityToken element must contain the base64 encoding of the leaf X.509 certificate
if the ValueType is #X509v3 , or it must contain the base64 encoding of the full X.509 certificate
chain if the ValueType is #X509PKIPathv1 .
The Algorithm attribute of the CanonicalizationMethod element must be:
http://www.w3.org/2001/10/xml-exc-c14n#
The Algorithm attribute of the SignatureMethod element must be:
http://www.w3.org/2000/09/xmldsig#rsa-sha1
The Algorithm attribute of the Transform element for each Reference element must be either:
http://www.w3.org/2001/10/xml-exc-c14n#
or:
http://www.w3.org/TR/2001/REC-xml-c14n-20010315
The Algorithm attribute of the DigestMethod element for each Reference element must be:
http://www.w3.org/2000/09/xmldsig#sha1
The KeyInfo element must contain a SecurityTokenReference element. The
SecurityTokenReference element must contain a Reference element with a URI attribute. The
URI attribute must use a local particle reference to identify the BinarySecurityToken element
Request Authentication
API Version 2011-08-01
70