I have made sure the bundle id in the follow locations are the same —
The cert I used to sign and test is Apple Development. Not sure if this matters as the Apple reviewers can’t test it as well.
Did I missed a step?
Initially the bundle id was mismatch due to a spelling error, but now it is fixed. Will this cause an issue, like some settings at Unity end that needs to reset the bundle ID manually?
Does Apple need to approve my IAP entries before they can show up in the app?
Your screenshot says “Developer action required”, you likely need to click on the exclamation point. Make sure you follow the steps here Unity - Manual: Configuring for Apple App Store and Mac App Store Also, make sure you fill out the Apple Business and Tax information, even if you are testing.
Yes, you should be doing receipt validation regardless to reduce fraudulent purchases Unity - Manual: Receipt validation Also, I might suggest that you check out the Sample IAP Project here Sample IAP Project