A signed request: the Authorization header plus the parts its signature covers.
Lower-case hex SHA-256 of the raw request body.
Full request path (base path included) without the query string.
A signed request: the Authorization header plus the parts its signature covers.