Product Advertising API
Developer Guide (API Version 2013-08-01)

Managing your Existing AWS Security Credentials for the Product Advertising API

If you are an existing Product Advertising API customer and your security credentials are linked to an AWS account, you can continue to use your AWS security credentials to access the Product Advertising API.

If you need to create a new pair of AWS security credentials, see the following procedure to create an IAM user, attach the required permissions policy to the user, and download the security credentials.


As best practice, use the IAM user credentials to access the Product Advertising API. You can continue using your root credentials, but root credentials provide unlimited access to your AWS resources. An IAM user has permission to access only the services you specify. For more information about managing your root credentials, see Managing Your Credentials.

To manage AWS security credentials for an IAM user

  1. Sign in to your Amazon Associates account.

  2. On the Manage Your Credentials page, choose Manage Credentials. You will use your AWS account to create the security credentials to access the Product Advertising API.

  3. Sign in to your AWS account with the same email address and password you used to register for the Product Advertising API.

  4. On the pop-up message, choose Get Started with IAM Users. In the following steps, you will create an IAM user and then give the user permission to access the Product Advertising API.

  5. Choose Add user.

  6. Type a user name such as ProductAdvertisingAPI-user. For Access Type, select Programmatic access.

  7. Choose Next: Permissions.

  8. Choose Attach existing policies directly.

  9. Choose Create policy. This opens a new page.

  10. For Create Your Own Policy, choose Select.

  11. On the Review Policy page, for Policy Name, type a name such as AmazonProductAdvertisingAPIFullAccess.

  12. For Description, type a description such as: "This policy provides full access to all operations of the Product Advertising API."

  13. For Policy Document, copy and paste the following policy in the field.

    Product Advertising API inline policy

    { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "ProductAdvertisingAPI:*", "Resource": "*" } ] }

    The following is an example Product Advertising API policy.

  14. Choose Validate Policy, and then choose Create Policy.

  15. Return to the Add user page and for Policy type, search and choose the policy you created. Choose Refresh if the policy doesn't appear.

  16. Choose Next: Review.

  17. Review your choices, and then choose Create user.

  18. Choose Download.csv to retrieve the credentials or choose Show to find the secret access key.

  19. Save the access key information in a safe location. You will use these credentials to make calls to the Product Advertising API.


    You can access the secret access key only when you first create an access key pair. For security reasons, it cannot be retrieved at a later time. Make sure you save both the access key ID and its matching secret key. If you lose them, you must create a new access key pair.

  20. When finished, choose Close. The user has the required permissions to access the Product Advertising API.