Exploring Chrome extensions has been a fun adventure for me, and one thing I am eager to do is request product information from the Amazon Product Advertising API. Although the code needed for this task seems straightforward, I have hit a roadblock - accessing the API requires creating a signed request that involves using AWS public and secret keys. Embedding my AWS keys in the Chrome Extension poses a security risk as it could potentially allow unauthorized access.
I am curious if there is a way to access the API without having to include my secret key. Has anyone successfully achieved this using JavaScript, particularly within a Chrome extension that bypasses the same origin policy?