Objective-C

Amazon Glacier Set Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to set an access policy for a vault (will overwrite the existing policy). Objective-C

#import <CkoRest.h>
#import <CkoAuthAws.h>
#import <CkoJsonObject.h>
#import <CkoStringBuilder.h>

BOOL success = NO;

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

CkoRest *rest = [[CkoRest alloc] init];

//  Connect to the Amazon AWS REST server in the desired region.
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
success = [rest Connect: @"glacier.us-west-2.amazonaws.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];

//  Provide AWS credentials.
CkoAuthAws *authAws = [[CkoAuthAws alloc] init];
authAws.AccessKey = @"AWS_ACCESS_KEY";
authAws.SecretKey = @"AWS_SECRET_KEY";
authAws.ServiceName = @"glacier";
authAws.Region = @"us-west-2";

success = [rest SetAuthAws: authAws];

//  --------------------------------------------------------------------------
//  Note: The above REST connection and setup of the AWS credentials
//  can be done once.  After connecting, any number of REST calls can be made.
//  The "auto reconnect" property passed to rest.Connect indicates that if
//  the connection is lost, a REST method call will automatically reconnect
//  if needed.
//  --------------------------------------------------------------------------

//  For more information, see Glacier Set Vault Access Policy Reference Documentation
//  
[rest AddHeader: @"x-amz-glacier-version" value: @"2012-06-01"];

//  Create the following JSON
//  Use this online tool to generate the code from sample JSON: 
//  Generate Code to Create JSON

//  {
//    "Version": "2012-10-17",
//    "Statement": [
//      {
//        "Sid": "Define-owner-access-rights",
//        "Effect": "Allow",
//        "Principal": {
//          "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
//        },
//        "Action": "glacier:DeleteArchive",
//        "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
//      }
//    ]
//  }

CkoJsonObject *jsonPolicy = [[CkoJsonObject alloc] init];
[jsonPolicy UpdateString: @"Version" value: @"2012-10-17"];
[jsonPolicy UpdateString: @"Statement[0].Sid" value: @"Define-owner-access-rights"];
[jsonPolicy UpdateString: @"Statement[0].Effect" value: @"Allow"];
[jsonPolicy UpdateString: @"Statement[0].Principal.AWS" value: @"arn:aws:iam::AWS_ACCOUNT_ID:root"];
[jsonPolicy UpdateString: @"Statement[0].Action" value: @"glacier:DeleteArchive"];
//  Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
[jsonPolicy UpdateString: @"Statement[0].Resource" value: @"arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"];

//  Wrap the above JSON in this JSON:

//  {
//     "Policy": "{  ... the above JSON ... }"
//  }
CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json UpdateString: @"Policy" value: [jsonPolicy Emit]];

CkoStringBuilder *sbRequestBody = [[CkoStringBuilder alloc] init];
[json EmitSb: sbRequestBody];

CkoStringBuilder *sbResponseBody = [[CkoStringBuilder alloc] init];
success = [rest FullRequestSb: @"PUT" uriPath: @"/AWS_ACCOUNT_ID/vaults/chilkat/access-policy" requestBody: sbRequestBody responseBody: sbResponseBody];
if (success != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

int respStatusCode = [rest.ResponseStatusCode intValue];
if (respStatusCode >= 400) {
    NSLog(@"%@%d",@"Response Status Code = ",respStatusCode);
    NSLog(@"%@",@"Response Header:");
    NSLog(@"%@",rest.ResponseHeader);
    NSLog(@"%@",@"Response Body:");
    NSLog(@"%@",[sbResponseBody GetAsString]);
    return;
}

//  Success is indicated by a 204 response status with an empty response body.
NSLog(@"%@%d",@"response status code = ",respStatusCode);