(SQL Server) Amazon Glacier Set Vault Access Policy

Demonstrates how to set an access policy for a vault (will overwrite the existing policy).

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @rest int
    -- Use "Chilkat_9_5_0.Rest" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Rest', @rest OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Connect to the Amazon AWS REST server in the desired region.
    DECLARE @bTls int
    SELECT @bTls = 1
    DECLARE @port int
    SELECT @port = 443
    DECLARE @bAutoReconnect int
    SELECT @bAutoReconnect = 1
    DECLARE @success int
    EXEC sp_OAMethod @rest, 'Connect', @success OUT, 'glacier.us-west-2.amazonaws.com', @port, @bTls, @bAutoReconnect

    -- Provide AWS credentials.
    DECLARE @authAws int
    -- Use "Chilkat_9_5_0.AuthAws" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.AuthAws', @authAws OUT

    EXEC sp_OASetProperty @authAws, 'AccessKey', 'AWS_ACCESS_KEY'
    EXEC sp_OASetProperty @authAws, 'SecretKey', 'AWS_SECRET_KEY'
    EXEC sp_OASetProperty @authAws, 'ServiceName', 'glacier'
    EXEC sp_OASetProperty @authAws, 'Region', 'us-west-2'

    EXEC sp_OAMethod @rest, 'SetAuthAws', @success OUT, @authAws

    -- --------------------------------------------------------------------------
    -- Note: The above REST connection and setup of the AWS credentials
    -- can be done once.  After connecting, any number of REST calls can be made.
    -- The "auto reconnect" property passed to rest.Connect indicates that if
    -- the connection is lost, a REST method call will automatically reconnect
    -- if needed.
    -- --------------------------------------------------------------------------

    -- For more information, see Glacier Set Vault Access Policy Reference Documentation
    -- 
    EXEC sp_OAMethod @rest, 'AddHeader', @success OUT, 'x-amz-glacier-version', '2012-06-01'

    -- Create the following JSON
    -- Use this online tool to generate the code from sample JSON: 
    -- Generate Code to Create JSON

    -- {
    --   "Version": "2012-10-17",
    --   "Statement": [
    --     {
    --       "Sid": "Define-owner-access-rights",
    --       "Effect": "Allow",
    --       "Principal": {
    --         "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
    --       },
    --       "Action": "glacier:DeleteArchive",
    --       "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
    --     }
    --   ]
    -- }

    DECLARE @jsonPolicy int
    -- Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.JsonObject', @jsonPolicy OUT

    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Version', '2012-10-17'
    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Statement[0].Sid', 'Define-owner-access-rights'
    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Statement[0].Effect', 'Allow'
    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Statement[0].Principal.AWS', 'arn:aws:iam::AWS_ACCOUNT_ID:root'
    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Statement[0].Action', 'glacier:DeleteArchive'
    -- Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
    EXEC sp_OAMethod @jsonPolicy, 'UpdateString', @success OUT, 'Statement[0].Resource', 'arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat'

    -- Wrap the above JSON in this JSON:

    -- {
    --    "Policy": "{  ... the above JSON ... }"
    -- }
    DECLARE @json int
    -- Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.JsonObject', @json OUT

    EXEC sp_OAMethod @jsonPolicy, 'Emit', @sTmp0 OUT
    EXEC sp_OAMethod @json, 'UpdateString', @success OUT, 'Policy', @sTmp0

    DECLARE @sbRequestBody int
    -- Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbRequestBody OUT

    EXEC sp_OAMethod @json, 'EmitSb', @success OUT, @sbRequestBody

    DECLARE @sbResponseBody int
    -- Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbResponseBody OUT

    EXEC sp_OAMethod @rest, 'FullRequestSb', @success OUT, 'PUT', '/AWS_ACCOUNT_ID/vaults/chilkat/access-policy', @sbRequestBody, @sbResponseBody
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @rest, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        EXEC @hr = sp_OADestroy @jsonPolicy
        EXEC @hr = sp_OADestroy @json
        EXEC @hr = sp_OADestroy @sbRequestBody
        EXEC @hr = sp_OADestroy @sbResponseBody
        RETURN
      END

    DECLARE @respStatusCode int
    EXEC sp_OAGetProperty @rest, 'ResponseStatusCode', @respStatusCode OUT
    IF @respStatusCode >= 400
      BEGIN

        PRINT 'Response Status Code = ' + @respStatusCode

        PRINT 'Response Header:'
        EXEC sp_OAGetProperty @rest, 'ResponseHeader', @sTmp0 OUT
        PRINT @sTmp0

        PRINT 'Response Body:'
        EXEC sp_OAMethod @sbResponseBody, 'GetAsString', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        EXEC @hr = sp_OADestroy @jsonPolicy
        EXEC @hr = sp_OADestroy @json
        EXEC @hr = sp_OADestroy @sbRequestBody
        EXEC @hr = sp_OADestroy @sbResponseBody
        RETURN
      END

    -- Success is indicated by a 204 response status with an empty response body.

    PRINT 'response status code = ' + @respStatusCode

    EXEC @hr = sp_OADestroy @rest
    EXEC @hr = sp_OADestroy @authAws
    EXEC @hr = sp_OADestroy @jsonPolicy
    EXEC @hr = sp_OADestroy @json
    EXEC @hr = sp_OADestroy @sbRequestBody
    EXEC @hr = sp_OADestroy @sbResponseBody


END
GO