Visual FoxPro

Amazon Glacier Set Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to set an access policy for a vault (will overwrite the existing policy). Visual FoxPro

LOCAL lnSuccess
LOCAL loRest
LOCAL lnBTls
LOCAL lnPort
LOCAL lnBAutoReconnect
LOCAL loAuthAws
LOCAL loJsonPolicy
LOCAL loJson
LOCAL loSbRequestBody
LOCAL loSbResponseBody
LOCAL lnRespStatusCode

lnSuccess = 0

* This example requires the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

loRest = CreateObject('Chilkat.Rest')

* Connect to the Amazon AWS REST server in the desired region.
lnBTls = 1
lnPort = 443
lnBAutoReconnect = 1
lnSuccess = loRest.Connect("glacier.us-west-2.amazonaws.com",lnPort,lnBTls,lnBAutoReconnect)

* Provide AWS credentials.
loAuthAws = CreateObject('Chilkat.AuthAws')
loAuthAws.AccessKey = "AWS_ACCESS_KEY"
loAuthAws.SecretKey = "AWS_SECRET_KEY"
loAuthAws.ServiceName = "glacier"
loAuthAws.Region = "us-west-2"

lnSuccess = loRest.SetAuthAws(loAuthAws)

* --------------------------------------------------------------------------
* Note: The above REST connection and setup of the AWS credentials
* can be done once.  After connecting, any number of REST calls can be made.
* The "auto reconnect" property passed to rest.Connect indicates that if
* the connection is lost, a REST method call will automatically reconnect
* if needed.
* --------------------------------------------------------------------------

* For more information, see Glacier Set Vault Access Policy Reference Documentation
* 
loRest.AddHeader("x-amz-glacier-version","2012-06-01")

* Create the following JSON
* Use this online tool to generate the code from sample JSON: 
* Generate Code to Create JSON

* {
*   "Version": "2012-10-17",
*   "Statement": [
*     {
*       "Sid": "Define-owner-access-rights",
*       "Effect": "Allow",
*       "Principal": {
*         "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
*       },
*       "Action": "glacier:DeleteArchive",
*       "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
*     }
*   ]
* }

loJsonPolicy = CreateObject('Chilkat.JsonObject')
loJsonPolicy.UpdateString("Version","2012-10-17")
loJsonPolicy.UpdateString("Statement[0].Sid","Define-owner-access-rights")
loJsonPolicy.UpdateString("Statement[0].Effect","Allow")
loJsonPolicy.UpdateString("Statement[0].Principal.AWS","arn:aws:iam::AWS_ACCOUNT_ID:root")
loJsonPolicy.UpdateString("Statement[0].Action","glacier:DeleteArchive")
* Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
loJsonPolicy.UpdateString("Statement[0].Resource","arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat")

* Wrap the above JSON in this JSON:

* {
*    "Policy": "{  ... the above JSON ... }"
* }
loJson = CreateObject('Chilkat.JsonObject')
loJson.UpdateString("Policy",loJsonPolicy.Emit())

loSbRequestBody = CreateObject('Chilkat.StringBuilder')
loJson.EmitSb(loSbRequestBody)

loSbResponseBody = CreateObject('Chilkat.StringBuilder')
lnSuccess = loRest.FullRequestSb("PUT","/AWS_ACCOUNT_ID/vaults/chilkat/access-policy",loSbRequestBody,loSbResponseBody)
IF (lnSuccess <> 1) THEN
    ? loRest.LastErrorText
    RELEASE loRest
    RELEASE loAuthAws
    RELEASE loJsonPolicy
    RELEASE loJson
    RELEASE loSbRequestBody
    RELEASE loSbResponseBody
    CANCEL
ENDIF

lnRespStatusCode = loRest.ResponseStatusCode
IF (lnRespStatusCode >= 400) THEN
    ? "Response Status Code = " + STR(lnRespStatusCode)
    ? "Response Header:"
    ? loRest.ResponseHeader
    ? "Response Body:"
    ? loSbResponseBody.GetAsString()
    RELEASE loRest
    RELEASE loAuthAws
    RELEASE loJsonPolicy
    RELEASE loJson
    RELEASE loSbRequestBody
    RELEASE loSbResponseBody
    CANCEL
ENDIF

* Success is indicated by a 204 response status with an empty response body.
? "response status code = " + STR(lnRespStatusCode)

RELEASE loRest
RELEASE loAuthAws
RELEASE loJsonPolicy
RELEASE loJson
RELEASE loSbRequestBody
RELEASE loSbResponseBody