Amazon FWS SOAP Authentication

For security purposes, Amazon Fulfillment Web Service uses your AWS credentials and an HMAC-SHA1 signature in the header of each SOAP request. Specifically, you need to include the following required elements in the header:

To calculate the signature

  1. Concatenate the values of the Action and Timestamp request parameters, in that order.

  2. Calculate an HMAC-SHA1 signature, using your Secret Access Key as the key.

  3. Convert the resulting value to base64.

  4. Pass the final value in the Signature parameter of the SOAP request.

Example SOAP Header

<soapenv:Header>
    <aws:AWSAccessKeyId
        soapenv:actor="http://schemas.xmlsoap.org/soap/actor/next"
        soapenv:mustUnderstand="0"
        xmlns:aws="http://security.amazonaws.com/doc/2007-01-01/"
        >0QY05JR56ZA8E56XPG82</aws:AWSAccessKeyId>
    <aws:Signature
        soapenv:actor="http://schemas.xmlsoap.org/soap/actor/next"
        soapenv:mustUnderstand="0"
        xmlns:aws="http://security.amazonaws.com/doc/2007-01-01/"
        >FvUH0tcso/u1P4vqJt7cXLPGrV8=</aws:Signature>
    <aws:Timestamp
        soapenv:actor="http://schemas.xmlsoap.org/soap/actor/next"
        soapenv:mustUnderstand="0"
        xmlns:aws="http://security.amazonaws.com/doc/2007-01-01/"
        >2009-01-23T00:43:12Z</aws:Timestamp>
</soapenv:Header>