OAuth Flow in Amazon Ads API

Advertisers can choose to delegate to approved client applications via an OAuth 2.0 flow, allowing these client applications to access their data and services. Client applications are Amazon Ads API callers administered by Login with Amazon (LwA) and approved by Amazon Ads for API access. For more information, consult with Amazon Ads API authorization documentation.

Both the advertiser and client application must participate to make a successful call to the Amazon Ads API. The advertiser much first grant authorization to the client application through a one-time authorization code created by LwA. This one-time authorization code is associated with both the advertiser and the client. Then the client application may use the one-time authorization code to retrieve an access token and refresh token from LwA. Client applications must include the resulting access token (Authorization: Bearer <access token>), along with its identifier (Amazon-Advertising-API-ClientId) and a profile identifier representing that advertiser’s account in a specific marketplace (Amazon-Advertising-API-Scope) in the request header to access that specific advertiser’s data and services.