# Rotate Client Secret

In accordance with Amazon's requirement, we are improving security for Amazon Services API Developers and their customers by requiring the rotation of Login with Amazon (LWA) credentials (client secrets) every 180 days. Regular and timely rotation of LWA client credentials limits the duration of your application’s credentials in the event that credentials are exposed or compromised. More

# Prerequisite

If you see the button Add New App Client in gray (unclickable), stop here and contact us ASAP. Otherwise, move to the next step

you can find this button from Integration(EDI/API)->API Integration AddNewInGray.png

# How do I rotate my LWA credentials?

# Use the following procedure to generate new LWA credentials (client secrets).

  1. Sign in to your developer account on Seller Central, Vendor Central, or Developer Central and navigate to the Developer Console page that lists all your applications.

  2. From the LWA credentials column, select View for any applications showing an expiry alert.

    alert

  3. (Optional) For ease of reference, you can store your existing LWA credentials securely in an encrypted form.

  4. Choose Rotate secret to generate a new LWA client secret. Copy and paste the Client ID and secret to a text editor. We will use it in the following steps

    rotate

  5. Acknowledge the warning message and confirm that you wish to proceed with the credential rotation.

    rotate

# Update your application to use the new LWA client secret.

  1. Login to VendorAuto and open the Instances page

    rotate

  2. Locate the Instance by the Client ID you saved in the step #4 above and click on the pencil button

    rotate

  3. Click on the pencil button under Client Secret. Replace Client Secret with the one you generated in the step #4 above

    rotate

  4. Confirm the change and secret rotation is completed.

More information For more information, refer to Rotating your application's LWA credentials in the Amazon Services API documentation. https://developer-docs.amazon.com/sp-api/docs/rotating-your-apps-lwa-credentials