SOAP without WS-Security

[Important]Important

If you do not intend to use WS-Security, you must be using SOAP 1.1. SOAP 1.2 is not supported in this situation.

Authentication of SOAP requests without WS-Security uses your AWS credentials and an HMAC-SHA1 signature. You include the authentication information in the following required elements of the SOAP request:

To calculate the signature

  1. Concatenate the values of the Action and Timestamp request parameters, in that order.

  2. Calculate an HMAC-SHA1 signature, using your Secret Access Key as the key.

  3. Convert the resulting value to base64.

  4. Pass the final value in the Signature parameter of the SOAP request.

[Important]Important

The SQS schema currently does not include the AWSAccessKeyID, Timestamp, and Signature parameters. Even though you're not using WS-Security for authentication, you must still place them inside the root element of the request. If you're using a toolkit that generates stubs from the WSDL, the code generated by the toolkit won't include the three parameters. You still have to insert them into the root element.