Also, we no longer use the Amazon affiliate program, or Yahoo for that matter, and we don't (and never have had) any idea what any individual bought.
Well congrats then.
I’m unsure how many tracking IDs you can create in your account, and as far as I’m aware and can tell, you cannot pass specific UTM codes or other identifying information along with a click to Amazon that is passed back to you on the reporting side. Meaning, you could track users you send to Amazon, and where you’re sending them, and you can see outcomes, but Amazon only provides the tracking ID back to you as a reference (this ID is meant to be used on a site/channel wide level, but as I mentioned above could possibly be abused depending on how many you can create)
Do you have any evidence that Debian negotiated a deal? Debian is not a company.