shouldn't it use both `@auth` and `@amazon` ?