Setup

After ASA2 is successfully installed, it is recommended to open the Setup page. Here you can decide if you want to use the Amazon PA API.

Note

You have to log in as an administrator to be able to access the setup.

With API

If you want to use ASA2 with PA API, set up your API account in the “With API” tab. Check Set up Amazon Associate Account for more details.

Without API

Waiting for API activation

Using ASA2 without an API makes sense if you are not yet activated for the API and while you are waiting for it, you already want to embed your products in a structured way. ASA2 can then update your products afterwards via API.

Other shops

Another use case is if you don’t work with the Amazon Affiliate program at all and want to use ASA2 in conjunction with other stores.

For more details about how to use other shops, check the Shops.

Screencast

Set up Amazon Associate Account

In order for ASA2 to be able to read product data via the Amazon Product Advertisment API (Amazon PA API), you must enter the access data for your Amazon Associate account. This account must be registered for the Amazon PA API.

If you do not have an Amazon Associate account yet or it is not registered for the Amazon PA API, please check these resources:

1. Sign up as an Amazon Associate

2. Register for Product Advertising API

or if you already have an AWS Account:

• Migrating your Product Advertising API Account from your AWS Account

Note

From March 2020 your account must be activated for the Amazon PA API 5.0. You can find out more about this in this blog post.

Amazon Access Key

Enter your “Access Key” and “Secret Key” you received when you registered for the Amazon PA API (see screenshot below).

You can also manage your credentials after registration in the menu “Tools / Amazon Product Advertisment API” in section “Manage Your Credentials” (see screenshot below). There you can also request a set of new credentials.

Secret Key Encryption

ASA2 provides enhanced security for your Amazon PA API credentials through Secret Key Encryption. This feature uses industry-standard AES-256-CBC encryption to protect your secret access key when stored in the WordPress database.

Security Benefits

• Strong Encryption: Uses AES-256-CBC encryption with cryptographically secure initialization vectors

• Enhanced Security: Protects your Amazon API credentials at rest in the database

• Automatic Key Management: Generates and manages encryption keys securely

• Migration Support: Automatically detects and upgrades from older encryption methods

How It Works

When Secret Key Encryption is enabled:

1. Your secret access key is encrypted using AES-256-CBC before being stored

2. A unique encryption key is generated and securely stored

3. Decryption happens automatically when ASA2 needs to use your credentials

Configuration

The encryption option appears as a checkbox in the PA API setup:

• Label: “Secret Key Encryption”

• Default: Enabled for new installations and recommended for existing users

• Requirement: You must re-enter your secret key when changing this setting

Note

Recommended for all users: This feature significantly enhances the security of your Amazon API credentials. Disable only if you experience activation problems.

Warning

Important: Changing the encryption setting requires re-entering your secret access key. Make sure you have your credentials available before making changes.

Migration from Older Encryption

If you’re using an older version of ASA2 with legacy encryption, you’ll see a warning message prompting you to upgrade:

“Your Secret Key is encrypted with an older method. We recommend enabling the ‘Secret Key Encryption’ option below and re-entering your Secret Key for improved security.”

To upgrade:

1. Check the “Secret Key Encryption” option

2. Re-enter your secret access key

3. Save the settings

This ensures your credentials are protected with the latest security standards.

How to configure an IAM user

For more information on how to configure an IAM user to use the Product Advertising API, please check out this official AWS documentation page: Managing your Existing AWS Security Credentials for the Product Advertising API.

Default Tracking ID and Store

Enter your “Tracking ID” and “Default Store”. They will be used for all requests without tracking ID and country code.

Note

With ASA2 you can define custom tracking IDs and country codes, see [asa2].

After you have saved your account data, the status should change to “Connected”.

When loading the setup page, the Amazon PA API connection status is checked once per hour.

Where are my credentials?

You do not have an account yet?

Please read my step-by-step tutorial How to register a new account for Amazon Affiliate Program.

You already have an account?

If you already have an account, log in to https://console.aws.amazon.com/ and access the section “Your Security Credentials”. There you will get your “Amazon Access Key ID” and “Secret Access Key”:

Where is my tracking ID?

If you do not know where to find your tracking ID for the Amazon Product Advertisment API, please read my guide Finding your Amazon Tracking ID.

Associate ID sets

With Associate ID sets you can manage multiple Amazon Associate IDs for different country stores. The sets are used by ASA2’s Internationalization (i18n) feature.

When you create an Associate ID set, enter an unique name, your Amazon Associate IDs by country and an optional comment.

Your first set will automatically be marked as default. If you have multiple sets, you can change which one should be used by default.

The Associate ID sets will be used, when ASA2 renders an internationalized product. For example, if a product from the german store will be loaded, the Associate ID for the german store from the default set will be used. If no matching ID will be found, the default Associate ID configured on the setup page will be used (Default Tracking ID and Store).

For more details see Associate ID mapping.