Amazon Marketplace Web Service credentials are designed to authenticate and authorize Amazon sellers.
If your application interacts with Amazon MWS then it requires credentials to access all the resources it needs to function properly. The credential authenticates to a seller account which can have access to ressources like products, orders, price or shipment informations.
Therefore only administrators should have access to the MWS credentials used by your application.
As a consequence, MWS credentials should not be stored along with the application code as they would grant special privilege to anyone who has access to the application source code.
Credentials should be stored outside of the code in a file that is never committed to your application code repository.
If possible, a better alternative is to use your cloud provider’s service for managing secrets. On AWS this service is called Secret Manager.
When credentials are disclosed in the application code, consider them as compromised and revoke them immediately.
See
