Viewing Your Aws Identifiers; Hmac-Sha Signatures For Rest Requests - Amazon Product Advertising API Developer's Manual

Product Advertising API Developer Guide
AWS or Amazon.com. No one who legitimately represents Amazon will ever ask you for your
Secret Access Key.
The Access Key ID is associated with your AWS account. You include it in AWS service requests to
identify yourself as the sender of the request.
The Access Key ID is not a secret, and anyone could use your Access Key ID in requests to AWS. To
provide proof that you truly are the sender of the request, you must also include a digital signature. For
all requests except those using SOAP with WS-Security, you calculate the signature using your Secret
Access Key. AWS uses the Access Key ID in the request to look up your Secret Access Key and then
calculates a digital signature with the key. If the signature AWS calculates matches the signature you
sent, the request is considered authentic. Otherwise, the request fails authentication and is not processed.
Related Topics
• HMAC-SHA Signatures for REST Requests (p. 55)
• Authenticating REST Requests (p. 57)

Viewing Your AWS Identifiers

Your Access Key ID and Secret Access Key are displayed to you when you create your AWS account.
They are not e-mailed to you. If you need to see them again, you can view them at any time from your
AWS account.
To view your AWS access identifiers
1. Go to the Amazon Web Services web site at http://aws.amazon.com.
2. Click Account.
3. Under Your Account, click Security Credentials.
4. In the spaces provided, type your user name and password, and then click Sign in using our secure
server.
5. Under Access Credentials, on the Access Keys tab, your access key ID is displayed. To view your
secret key, under Secret Access Key, click Show.
Related Topics
• Your Product Advertising API Account (p. 54)
• Your AWS Identifiers (p. 54)

HMAC-SHA Signatures for REST Requests

Topics
• Authentication Parameters (p. 56)
• Basic Authentication Process (p. 56)
The topics in this section describe how Product Advertising API uses HMAC-SHA signatures to authenticate
REST requests.
Request Authentication
API Version 2011-08-01
55