When accessing Amazon SQS using Query or using SOAP without WS-Security, you must provide the following items so the request can be authenticated:
AWS Access Key ID—Your AWS account is identified by your Access Key ID, which AWS uses to look up your Secret Access Key.
Signature—Each request must contain a valid HMAC-SHA request signature, or the request is rejected.
You calculate the request signature by using your Secret Access Key, which is a shared secret known only to you and AWS.
Date—Each request must contain the time stamp of the request.
Depending on the API you're using (Query or SOAP), you can provide an expiration date and time for the request instead of or in addition to the time stamp. For details of what is required and allowed for each API, see the authentication topic for the particular API.