(DataFlex) AWS Setup Bootstrap Secret in Memory

See more Secrets Examples

Accessing a cloud-based secrets manager requires authentication credentials, which cannot be stored in the manager itself. Instead, they must be securely stored locally.

One solution is to store the authentication credentials as a secret in the Windows Credentials Manager or Apple Keychain. These credentials serve as the "bootstrap secret" for authenticating with the cloud-based secrets manager.

Note: This example requires Chilkat v10.1.0 or later.

For more information, see https://cknotes.com/chilkat-secrets-class-added-in-version-10-1-0/

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoBootstrap
    Variant vJson
    Handle hoJson
    Boolean iSuccess
    Variant vJsonSecret
    Handle hoJsonSecret
    Boolean iSuccess
    String sTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatSecrets)) To hoBootstrap
    If (Not(IsComObjectCreated(hoBootstrap))) Begin
        Send CreateComObject of hoBootstrap
    End

    // This secret will reside in memory.
    Set ComLocation Of hoBootstrap To "memory"

    // Specify the name of the bootstrap secret.
    // service and username are required.
    // appName and domain are optional.
    // Note: The values are arbitrary and can be anything you want.
    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComUpdateString Of hoJson "appName" "AWS" To iSuccess
    Get ComUpdateString Of hoJson "service" "Example" To iSuccess
    Get ComUpdateString Of hoJson "username" "Joe" To iSuccess

    // The bootstrap secret for the AWS Secrets Manager will contain
    // the AWS region, access key, and secret key, like this:
    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonSecret
    If (Not(IsComObjectCreated(hoJsonSecret))) Begin
        Send CreateComObject of hoJsonSecret
    End
    // Modify if necessary to use your region..
    Get ComUpdateString Of hoJsonSecret "awsRegion" "us-east-1" To iSuccess
    Get ComUpdateString Of hoJsonSecret "awsAccessKey" "YOUR_ACCESS_KEY" To iSuccess
    Get ComUpdateString Of hoJsonSecret "awsSecretKey" "YOUR_SECRET_KEY" To iSuccess

    // Create or update the secret (in memory).
    // The secret is stored encrypted in memory, and is available to be used
    // regardless of the lifetime of the "bootstrap" object.
    Get pvComObject of hoJson to vJson
    Get pvComObject of hoJsonSecret to vJsonSecret
    Get ComUpdateSecretJson Of hoBootstrap vJson vJsonSecret To iSuccess
    If (iSuccess = False) Begin
        Get ComLastErrorText Of hoBootstrap To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Showln "The AWS bootstrap secret has been stored in memory."


End_Procedure