Any link that is paid for (which includes affiliate links), should use the rel="nofollow" HTML attribute. With recent updates by Google, it is recommended you also add "sponsored" your rel tag. So you should use rel="sponsored nofollow" for any affiliate link since not every search engine uses of the 'sponsored' tag.