(DataFlex) S3 Put Bucket Policy

Demonstrates how to add or replace a policy on a bucket. The following information is quoted from the AWS REST API reference documentation at PUT Bucket Policy

This implementation of the PUT operation uses the policy subresource to add to or replace a policy on a bucket. If the bucket already has a policy, the one in this request completely replaces it. To perform this operation, you must be the bucket owner. If you are not the bucket owner but have PutBucketPolicy permissions on the bucket, Amazon S3 returns a 405 Method Not Allowed. In all other cases for a PUT bucket policy request that is not from the bucket owner, Amazon S3 returns 403 Access Denied. There are restrictions about who can create bucket policies and which objects in a bucket they can apply to. For more information, go to Using Bucket Policies.

Important: This example requires Chilkat v9.5.0.66 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoRest
    Boolean iBTls
    Integer iPort
    Boolean iBAutoReconnect
    Boolean iSuccess
    Variant vAuthAws
    Handle hoAuthAws
    Handle hoJson
    String sResponseJsonStr
    String sTemp1
    Integer iTemp1
    Integer iTemp2
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Important: This example requires Chilkat v9.5.0.66 or greater.

    Get Create (RefClass(cComChilkatRest)) To hoRest
    If (Not(IsComObjectCreated(hoRest))) Begin
        Send CreateComObject of hoRest
    End

    // Connect to the Amazon AWS REST server in the desired region.
    Move True To iBTls
    Move 443 To iPort
    Move True To iBAutoReconnect
    Get ComConnect Of hoRest "s3-us-west-2.amazonaws.com" iPort iBTls iBAutoReconnect To iSuccess

    // Provide AWS credentials.
    Get Create (RefClass(cComChilkatAuthAws)) To hoAuthAws
    If (Not(IsComObjectCreated(hoAuthAws))) Begin
        Send CreateComObject of hoAuthAws
    End
    Set ComAccessKey Of hoAuthAws To "AWS_ACCESS_KEY"
    Set ComSecretKey Of hoAuthAws To "AWS_SECRET_KEY"
    Set ComServiceName Of hoAuthAws To "s3"

    // This particular bucket is in the Oregon region, as opposed to the US Standard,
    // therefore the Region must be set appropriately.
    // Also note that we connected to "s3-us-west-2.amazonaws.com".
    Set ComRegion Of hoAuthAws To "us-west-2"

    Get pvComObject of hoAuthAws to vAuthAws
    Get ComSetAuthAws Of hoRest vAuthAws To iSuccess

    // Note: The above REST connection and setup of the AWS credentials
    // can be done once.  After connecting, any number of REST calls can be made.
    // The "auto reconnect" property passed to rest.Connect indicates that if
    // the connection is lost, a REST method call will automatically reconnect
    // if needed.
    // --------------------------------------------------------------------------

    // Set the bucket name via the HOST header.
    // In this case, the bucket name is "chilkat.ocean".
    // Note that the Host header should use "bucketName.s3.amazonaws.com", not "bucketName.s3-us-west-2.amazonaws.com"
    Set ComHost Of hoRest To "chilkat.ocean.s3.amazonaws.com"

    // Build the S3 JSON Policy to be sent in the request:
    Get Create (RefClass(cComChilkatJsonObject)) To hoJson
    If (Not(IsComObjectCreated(hoJson))) Begin
        Send CreateComObject of hoJson
    End
    Get ComUpdateString Of hoJson "Version" "2012-10-17" To iSuccess
    Get ComUpdateString Of hoJson "Statement[0].Action[0]" "s3:GetObject" To iSuccess
    Get ComUpdateString Of hoJson "Statement[0].Effect" "Allow" To iSuccess
    Get ComUpdateString Of hoJson "Statement[0].Resource" "arn:aws:s3:::chilkat.ocean/" To iSuccess
    Get ComUpdateString Of hoJson "Statement[0].Principal" "*" To iSuccess

    // The JSON Policy constructed by the above lines of code is:
    // (The bucket name is "chilkat.ocean")

    // 	{ 
    // 	  "Version": "2012-10-17",
    // 	  "Statement": [
    // 	    { 
    // 	      "Action": [
    // 	        "s3:GetObject"
    // 	      ],
    // 	      "Effect": "Allow",
    // 	      "Resource": "arn:aws:s3:::chilkat.ocean/",
    // 	      "Principal": "*"
    // 	    }
    // 	  ]
    // 	}

    // Add or replace the policy on the bucket.
    Get ComEmit Of hoJson To sTemp1
    Get ComFullRequestString Of hoRest "PUT" "/?policy" sTemp1 To sResponseJsonStr
    Get ComLastMethodSuccess Of hoRest To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoRest To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // When successful, the S3 Storage service will respond with a 200 or 204 response code,
    // with an XML body.  
    Get ComResponseStatusCode Of hoRest To iTemp1
    Get ComResponseStatusCode Of hoRest To iTemp2
    If ((iTemp1 <> 200) And (iTemp2 <> 204)) Begin
        // Examine the request/response to see what happened.
        Get ComResponseStatusCode Of hoRest To iTemp1
        Showln "response status code = " iTemp1
        Get ComResponseStatusText Of hoRest To sTemp1
        Showln "response status text = " sTemp1
        Get ComResponseHeader Of hoRest To sTemp1
        Showln "response header: " sTemp1
        Showln "response body: " sResponseJsonStr
        Showln "---"
        Get ComLastRequestStartLine Of hoRest To sTemp1
        Showln "LastRequestStartLine: " sTemp1
        Get ComLastRequestHeader Of hoRest To sTemp1
        Showln "LastRequestHeader: " sTemp1
    End

    Showln "Success."

    // A successful response has no response body..
    // (The Amazon documentation indicates a 204 response, but in our testing we receive a 200 response..)

    // 	HTTP/1.1 204 No Content  
    // 	x-amz-id-2: Uuag1LuByR5Onimru9SAMPLEAtRPfTaOFg==  
    // 	x-amz-request-id: 656c76696e6727732SAMPLE7374  
    // 	Date: Tue, 04 Apr 2010 20:34:56 GMT  
    // 	Connection: keep-alive  
    // 	Server: AmazonS3  


End_Procedure