[fixed] Product Advertising API Reply to topic

Dear Product Advertising API Developer,
We wanted to remind you that all Product Advertising API developers will be required to authenticate all calls to the Product Advertising API by August 15, 2009. We noticed that requests with your AWS Access Key ID are not being signed and, while you have more than 60 days until the date on which authentication is required, we are, as a courtesy, sending you this email to remind you of the new authentication requirement. Please remember that calls to the Product Advertising API that are not signed will not be processed after August 15, 2009.


We’d also like to take this opportunity to point out the resources available to help you make this change to your applications:

The Developer Guide has details on what signed requests are and how to construct signed requests.
Sample Code for Signed Requests is available in Java, C# and Perl.
Our technical staff and other customers are available to answer questions on our Community Forums.
More resources can be found at the Product Advertising API home page.

There are two types of requests to AWS:

• Anonymous requests. Requests to free services can be made anonymously. Though a valid Access Key ID must be included in all requests to AWS, no attempt is made to confirm that the request originated from the party responsible for the AWS account associated with the Access Key ID. In other words, no authentication is necessary for the request to succeed.
  
  Services to which anonymous requests can be made include: Amazon E-Commerce Service (ECS) 4.0 and Amazon Historical Pricing.
  
  
  
• Authenticated requests. Services that want to track service usage, either for the purpose of calculating usage statistics or to bill for usage, must be able to verify that the identity of the sender of a request is the person or party responsible for the AWS account. The identity of the sender is verified by confirming that the Secret Access Key used in the request signature is the Secret Access Key associated with the Access Key ID included in the request.
  
  Services to which authenticated (signed) requests must be made include: Alexa Top Sites, Alexa Web Information Service (AWIS), Alexa Web Search Platform, Amazon Mechanical Turk, and Amazon Simple Queue Service (SQS).

To use a service that requires authenticated requests, a signature for each request must be calculated and included as the value of the Signature parameter in requests to those services.