for private seller applications 'code': 'Unauthorized', 'message': 'Access to requested resource is denied.'

[Foster2]

Hi, I tried to connect to vendor central following the steps for private seller applications https://github.com/amzn/selling-partner-api-docs/blob/main/guides/en-US/developer-guide/SellingPartnerApiDeveloperGuide.md

I created an IAM user with inline policy
{ "Version": "2012-10-17", "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": "sts:AssumeRole", "Resource": "arn:aws:iam::0000000:role/rolex" } ] }

I got a policy SellingPartnerAPI arn:aws:iam::0000000:policy/SellingPartnerAPI
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "execute-api:Invoke", "Resource": "arn:aws:execute-api:*:*:*" } ] }

A role arn:aws:iam::0000000:role/rolex relates the policy SellingPartnerAPI to the IAM user.

Then the aws_secret_key and aws_access_key are generated from the IAM user.

lwa_app_id and lwa_client_secret are from the developer central in vendor central.

refresh_token is from the authorize button in vendor central.

With those credentials and the following code

credentials=dict(
        refresh_token='Atzr|xxxxxxxxxxx',
        lwa_app_id='amzn1.application-oa2-client.xxxxxx',
        lwa_client_secret='xxxxxxxx',
        aws_secret_key='d8gAxxxxxxxxxxx',
        aws_access_key='AKIAXXXXXXXXXXX',
        role_arn='arn:aws:iam::0000000:role/rolex',
    )


try:
    res = Orders(credentials=credentials).get_orders(CreatedAfter=(datetime.utcnow() - timedelta(days=7)).isoformat())
    print(res.payload)  # json data
except SellingApiException as ex:
    print(ex)

[{'code': 'Unauthorized', 'message': 'Access to requested resource is denied.', 'details': ''}]

I got stuck on this for a while. Any idea what has gone wrong? Thanks.

[Foster2]

Case solved.

vendor central got VendorOrders.

res = VendorOrders(credentials=credentials).get_purchase_orders(CreatedAfter=(datetime.utcnow() - timedelta(days=7)).isoformat())