You're reading it right. You send them through Amazon, where they log in with their usual Amazon credentials and can check your rates. When they confirm the purchase, they are redirected back to your page with their authentication tokens as URL parameters.

Without an Amazon account they can't purchase, although in my experiences this hasn't been brought up as a problem by potential customers.