Frequently asked questions

A role is a mechanism used by Amazon Business APIs to determine whether an application has access to an operation or resource. As a developer, you must request and qualify for a role. Roles protect access to personally identifiable information (PII) and other sensitive data. Roles ensure developers have access only to required data.

Review the role descriptions to understand the purpose of each role. For more information, see Amazon Business API roles.

1. Sign in to Solution Provider Portal (SPP).

2. In Action column, select Edit App. The role(s) you previously requested and approved displays.

3. To add, choose role(s) from the list. To remove, deselect the checkbox.

1. Go to your developer profile and submit a role to be added.

2. Once your developer profile has been approved, go to your app configuration. Apply the newly approved role. Save the changes and relist the app.

3. After the app is approved, get new authorizations to generate a new refresh token. The refresh token will grant access to the API operations, reports, feeds, and notifications the new role will provide.

{
    "errors": [
        {
            "code": "Unauthorized",
            "message": "Email is not authorized",
            "details": "End user email is not Authorized"
        }
    ]
}

This happens when the user is passing an email that isn't associated with the Amazon Business account or the user email falls under Matching and Clearing Engine (MACE).

The email address is a mandatory parameter in the header of the request. To resolve this issue, the user must pass an email in the x-amz-user-email field that is associated with the Amazon Business account. Also, the email shouldn't fall under MACE.

{
    "errors": [
        {
            "message": "Access to requested resource is denied.",
            "code": "Unauthorized",
            "details": "The access token you provided has expired."
        }
    ]
}

This happens when the user is passing a token in the x-amz-access-token field that's been expired. Access tokens expire after an hour.

To resolve this issue, you need to generate a refresh token. Refer to Onboarding Step 3: Authorize your Amazon Business API apps.

{
    "error_description": "The request has an invalid grant parameter : code",
    "error": "invalid_grant"
}

This happens because the grant code has expired. Grant code expires in five minutes after generation.

To resolve the issue, generate a refresh token to get the grant code. Refer to Onboarding Step 3: Authorize your Amazon Business API apps.

For guidance on how to generate access and refresh tokens, refer to Onboarding Step 3: Authorize your Amazon Business API apps.

You’ll receive an error and unable to proceed. Learn more.

No. You must sign in using an admin account to provide consent. An error will occur if you aren't using an admin account while providing consent. To resolve the error, do these steps.

This error is caused by incorrect redirect_uri and applicationId. You must use the same redirect_uri and applicationId you've provided in SPP. Any missing or additional characters will cause an error. To resolve the error, do these steps.

Yes. We provide guidance on what is required when displaying Amazon Business products within your platform. Compliance with these standards are enforced. Refer to Product Search API customer experience guidelines.

• Public app. An app that is publicly available and is authorized by a business customer.
• Private app. An app that is available only to your organization and is self-authorized.

Yes, Amazon Business supports a static sandbox environment for select APIs. For more information, see Amazon Business API sandbox.

{
    "errors": [
        {
            
            "code": "InvalidInput"
        }
    ]
}

getProductsByAsins is a POST method as opposed to other methods. Please ensure that they have the right method selected when making the API call. Also, ensure that the content being posted has the content-type JSON.