// Add steps as necessary for accessing the software, post-configuration, and testing. Don’t include full usage instructions for your software, but add links to your product documentation for that information.
//Should any sections not be applicable, remove them


== Post-deployment steps
// If post-deployment steps are required, add them here. If not, remove the heading


=== Copy the IAM role ARN

. Open the https://console.aws.amazon.com/iam/[AWS IAM console].
. In the navigation pane, choose *Roles*.
. Choose the name of the role that you will use to create the application.
. Copy the role Amazon Resource Number (ARN).

=== Register an app on Seller Central

. Sign into https://sellercentral.amazon.com/[Seller Central] using the credentials that you used to register as a developer.
. Choose *Develop Apps* from the *Apps & Services* menu.
. Choose *Add new app client*. 
. On the *App registration* page, enter an app name.
. Choose *SP API* from the *API Type* drop-down list.
. For *IAM ARN*, enter the role ARN you copied previously.
. Choose the pertinent application roles.
. Enter OAuth login and redirect URIs. These parameters are optional for private seller and vendor applications.
. Choose *Save and exit*.
. Choose *Develop Apps* from the *Apps & Services* menu.
. Choose *View* under LWA credentials for the app you registered previously.
. Copy the client identifier and client secret. You will enter these on lines 26 and 27, respectively, of *lambda_function.py* later.

=== Obtain seller authorization

Obtain seller authorization using either the https://github.com/amzn/selling-partner-api-docs/blob/main/guides/en-US/developer-guide/SellingPartnerApiDeveloperGuide.md#website-authorization-workflow[website authorization workflow] or https://github.com/amzn/selling-partner-api-docs/blob/main/guides/en-US/developer-guide/SellingPartnerApiDeveloperGuide.md#self-authorization[self authorization]. You will enter the refresh token on line 32 of *lambda_function.py* later.


=== Edit and test the AWS Lambda function

. Open the https://console.aws.amazon.com/lambda/[AWS Lambda console].
. In the navigation pane, choose *Functions*.
. Choose the name of the Lambda function created by the Selling Partner API Quick Start.
//TODO: What's the name of this function?
. On the *Code* tab, choose *lambda_function.py* in *Environment* window.
. On line 26, enter the client identifier you copied previously.
. On line 27, enter the client secret.
. On line 32, enter the refresh token you received previously from the seller.
. Choose *Deploy*.
. Choose *Test*.
. On the *Configure test event* dialog box, enter an event name, and choose *Create*.
. Choose *Test*. The *Execution results* tab shows the status and details of the test.

== Best practices for using SP API on AWS
// Provide post-deployment best practices for using the technology on AWS, including considerations such as migrating data, backups, ensuring high performance, high availability, etc. Link to software documentation for detailed information.
For more information about SP-API best practices, see the https://github.com/amzn/selling-partner-api-docs/blob/main/guides/en-US/developer-guide/SellingPartnerApiDeveloperGuide.md[Selling Partner API Developer Guide].


== Security
// Provide post-deployment best practices for using the technology on AWS, including considerations such as migrating data, backups, ensuring high performance, high availability, etc. Link to software documentation for detailed information.

* Use of an IAM role with permission to call SP-API is a best practice.
* The temporary credentials received from the IAM role are valid only for one hour.