title: Is the Amazon SimpleDB WSDL for SOAP without WS-Security correct?
body: <p>The <a href="http://docs.amazonwebservices.com/AmazonSimpleDB/latest/DeveloperGuide/index.html?NotUsingWSSecurity.html" rel="nofollow noreferrer">SimpleDB documentation</a> includes this example request for a ListDomains method.
  Note that there are Signature, Timestamp, AWSAccessKeyId and Version subelements:</p>
  
  <pre><code>  &lt;SOAP-ENV:Body&gt;
      &lt;ListDomainsRequest xmlns=" http://sdb.amazonaws.com/doc/2007-11-07"&gt;
        &lt;Signature&gt;SZf1CHmQnrZbsrC13hCZS061ywsEXAMPLE&amp;lt;&lt;/Signature&gt;
        &lt;Timestamp&gt;2009-02-16T17:39:51.000Z&lt;/Timestamp&gt;
        &lt;AWSAccessKeyId&gt;1D9FVRAYCP1VJS767E02EXAMPLE&lt;/AWSAccessKeyId&gt;
        &lt;Version&gt;2007-11-07&lt;/Version&gt;
        &lt;Action&gt;ListDomains&lt;/Action&gt;
      &lt;/ListDomainsRequest&gt;
    &lt;/SOAP-ENV:Body&gt;
  </code></pre>
  
  <p>The <a href="http://sdb.amazonaws.com/doc/2007-11-07/AmazonSimpleDB.wsdl" rel="nofollow noreferrer">WSDL</a> uses this definition for ListDomains:</p>
  
  <pre><code>&lt;xs:element name="ListDomains"&gt;
      &lt;xs:complexType&gt;
          &lt;xs:sequence&gt;
              &lt;xs:element name="MaxNumberOfDomains" type="xs:int" minOccurs="0"/&gt;
              &lt;xs:element name="NextToken" type="xs:string" minOccurs="0"/&gt;
          &lt;/xs:sequence&gt;
      &lt;/xs:complexType&gt;
  &lt;/xs:element&gt;
  ...
  &lt;wsdl:operation name="ListDomains"&gt;
      &lt;soap:operation soapAction="ListDomains"/&gt;
      &lt;wsdl:input&gt;
          &lt;soap:body use="literal"/&gt;
          &lt;/wsdl:input&gt;
          &lt;wsdl:output&gt;
              &lt;soap:body use="literal"/&gt;
          &lt;/wsdl:output&gt;
      &lt;/wsdl:operation&gt;
  </code></pre>
  
  <p>The Signature, Timestamp, AWSAccessKeyId and Version information is not in the ListDomains definition.</p>
  
  <p>AWS customer support already has investigated this and says this is as designed: </p>
  
  <blockquote>
    <p><a href="http://developer.amazonwebservices.com/connect/thread.jspa?threadID=30814" rel="nofollow noreferrer">"The WSDL will continue to cover only
    application-level elements, as it is a
    cleaner approach, fitting better with
    the long-term "SOAP with WS-Security"
    envelope/body model."</a></p>
  </blockquote>
  
  <p>Is the example request correct? Importing the WSDL for example in Delphi does not generate code for the authorization elements.</p>