i wonder is it normal practice on mobile to include private key (from the Analytics SDK docs for Android):

InsightsCredentials credentials = AmazonInsights.newCredentials(YOUR_APP_KEY, YOUR_PRIVATE_KEY);

Looks strange. I'd expect that either each app installation to have its own permanent key (most probably some derivative of your key generated at install/download) or, by analogy with the well known system, something like the app/device coming to you for temporary ticket and using it to initialize SDK.