DataFlex

Amazon Glacier Get Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to retrieve the access-policy subresource set on the vault DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Boolean iSuccess
    Handle hoRest
    Boolean iBTls
    Integer iPort
    Boolean iBAutoReconnect
    Variant vAuthAws
    Handle hoAuthAws
    Variant vSbResponseBody
    Handle hoSbResponseBody
    Integer iRespStatusCode
    Handle hoJson
Policy    Handle hoJsonPolicy
    String sVersion
    Integer i
    Integer iCount_i
    String sSid
    String sEffect
    String sPrincipalAWS
    String sAction
    String sResource
    String sTemp1

    Move False To iSuccess

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatRest)) To hoRest
    If (Not(IsComObjectCreated(hoRest))) Begin
        Send CreateComObject of hoRest
    End

    // Connect to the Amazon AWS REST server in the desired region.
    Move True To iBTls
    Move 443 To iPort
    Move True To iBAutoReconnect
    Get ComConnect Of hoRest "glacier.us-west-2.amazonaws.com" iPort iBTls iBAutoReconnect To iSuccess

    // Provide AWS credentials.
    Get Create (RefClass(cComChilkatAuthAws)) To hoAuthAws
    If (Not(IsComObjectCreated(hoAuthAws))) Begin
        Send CreateComObject of hoAuthAws
    End
    Set ComAccessKey Of hoAuthAws To "AWS_ACCESS_KEY"
    Set ComSecretKey Of hoAuthAws To "AWS_SECRET_KEY"
    Set ComServiceName Of hoAuthAws To "glacier"
    Set ComRegion Of hoAuthAws To "us-west-2"

    Get pvComObject of hoAuthAws to vAuthAws
    Get ComSetAuthAws Of hoRest vAuthAws To iSuccess

    // --------------------------------------------------------------------------
    // Note: The above REST connection and setup of the AWS credentials
    // can be done once.  After connecting, any number of REST calls can be made.
    // The "auto reconnect" property passed to rest.Connect indicates that if
    // the connection is lost, a REST method call will automatically reconnect
    // if needed.
    // --------------------------------------------------------------------------

    // 
    // For more information, see Glacier Get Vault Access Policy Reference Documentation
    // 
    Get ComAddHeader Of hoRest "x-amz-glacier-version" "2012-06-01" To iSuccess

    // Get the access policy for the "chilkat" vault.
    Get Create (RefClass(cComChilkatStringBuilder)) To hoSbResponseBody
    If (Not(IsComObjectCreated(hoSbResponseBody))) Begin
        Send CreateComObject of hoSbResponseBody
    End
    Get pvComObject of hoSbResponseBody to vSbResponseBody
    Get ComFullRequestNoBodySb Of hoRest "GET" "/AWS_ACCOUNT_ID/vaults/chilkat/access-policy" vSbResponseBody To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoRest To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComResponseStatusCode Of hoRest To iRespStatusCode
    If (iRespStatusCode >= 400) Begin
        Showln "Response Status Code = " iRespStatusCode
        Showln "Response Header:"
        Get ComResponseHeader Of hoRest To sTemp1
        Showln sTemp1
        Showln "Response Body:"
        Get ComGetAsString Of hoSbResponseBody To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Success is indicated by a 200 response status.
    Showln "response status code = " iRespStatusCode

    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get pvComObject of hoSbResponseBody to vSbResponseBody
    Get ComLoadSb Of hoJson vSbResponseBody To iSuccess
    Set ComEmitCompact Of hoJson To False

    // Returns JSON such as this:
    // {
    //   "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Define-owner-access-rights\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::9999999999999:root\"},\"Action\":\"glacier:DeleteArchive\",\"Resource\":\"arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat\"}]}"
    // }

    // Unwrap...
    Get Create (RefClass(cComChilkatJsonObject)) To hoJsonPolicy
    If (Not(IsComObjectCreated(hoJsonPolicy))) Begin
        Send CreateComObject of hoJsonPolicy
    End
    Get ComStringOf Of hoJson "Policy" To sTemp1
    Get ComLoad Of hoJsonPolicy sTemp1 To iSuccess
    Set ComEmitCompact Of hoJsonPolicy To False

    Get ComEmit Of hoJsonPolicy To sTemp1
    Showln sTemp1
    Showln "----"

    // The jsonPolicy contains:

    // {
    //   "Version": "2012-10-17",
    //   "Statement": [
    //     {
    //       "Sid": "Define-owner-access-rights",
    //       "Effect": "Allow",
    //       "Principal": {
    //         "AWS": "arn:aws:iam::9999999999999:root"
    //       },
    //       "Action": "glacier:DeleteArchive",
    //       "Resource": "arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat"
    //     }
    //   ]
    // }
    // 

    // Use this online tool to generate parsing code from sample JSON: 
    // Generate Parsing Code from JSON

    // To parse the above contents of jsonPolicy...

    Get ComStringOf Of hoJsonPolicy "Version" To sVersion
    Move 0 To i
    Get ComSizeOfArray Of hoJsonPolicy "Statement" To iCount_i
    While (i < iCount_i)
        Set ComI Of hoJsonPolicy To i
        Get ComStringOf Of hoJsonPolicy "Statement[i].Sid" To sSid
        Get ComStringOf Of hoJsonPolicy "Statement[i].Effect" To sEffect
        Get ComStringOf Of hoJsonPolicy "Statement[i].Principal.AWS" To sPrincipalAWS
        Get ComStringOf Of hoJsonPolicy "Statement[i].Action" To sAction
        Get ComStringOf Of hoJsonPolicy "Statement[i].Resource" To sResource
        Move (i + 1) To i
    Loop



End_Procedure