(Objective-C) Amazon Glacier Set Vault Access Policy

Demonstrates how to set an access policy for a vault (will overwrite the existing policy).

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoRest.h>
#import <CkoAuthAws.h>
#import <CkoJsonObject.h>
#import <CkoStringBuilder.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoRest *rest = [[CkoRest alloc] init];

// Connect to the Amazon AWS REST server in the desired region.
BOOL bTls = YES;
int port = 443;
BOOL bAutoReconnect = YES;
BOOL success = [rest Connect: @"glacier.us-west-2.amazonaws.com" port: [NSNumber numberWithInt: port] tls: bTls autoReconnect: bAutoReconnect];

// Provide AWS credentials.
CkoAuthAws *authAws = [[CkoAuthAws alloc] init];
authAws.AccessKey = @"AWS_ACCESS_KEY";
authAws.SecretKey = @"AWS_SECRET_KEY";
authAws.ServiceName = @"glacier";
authAws.Region = @"us-west-2";

success = [rest SetAuthAws: authAws];

// --------------------------------------------------------------------------
// Note: The above REST connection and setup of the AWS credentials
// can be done once.  After connecting, any number of REST calls can be made.
// The "auto reconnect" property passed to rest.Connect indicates that if
// the connection is lost, a REST method call will automatically reconnect
// if needed.
// --------------------------------------------------------------------------

// For more information, see Glacier Set Vault Access Policy Reference Documentation
// 
[rest AddHeader: @"x-amz-glacier-version" value: @"2012-06-01"];

// Create the following JSON
// Use this online tool to generate the code from sample JSON: 
// Generate Code to Create JSON

// {
//   "Version": "2012-10-17",
//   "Statement": [
//     {
//       "Sid": "Define-owner-access-rights",
//       "Effect": "Allow",
//       "Principal": {
//         "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
//       },
//       "Action": "glacier:DeleteArchive",
//       "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
//     }
//   ]
// }

CkoJsonObject *jsonPolicy = [[CkoJsonObject alloc] init];
[jsonPolicy UpdateString: @"Version" value: @"2012-10-17"];
[jsonPolicy UpdateString: @"Statement[0].Sid" value: @"Define-owner-access-rights"];
[jsonPolicy UpdateString: @"Statement[0].Effect" value: @"Allow"];
[jsonPolicy UpdateString: @"Statement[0].Principal.AWS" value: @"arn:aws:iam::AWS_ACCOUNT_ID:root"];
[jsonPolicy UpdateString: @"Statement[0].Action" value: @"glacier:DeleteArchive"];
// Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
[jsonPolicy UpdateString: @"Statement[0].Resource" value: @"arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"];

// Wrap the above JSON in this JSON:

// {
//    "Policy": "{  ... the above JSON ... }"
// }
CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json UpdateString: @"Policy" value: [jsonPolicy Emit]];

CkoStringBuilder *sbRequestBody = [[CkoStringBuilder alloc] init];
[json EmitSb: sbRequestBody];

CkoStringBuilder *sbResponseBody = [[CkoStringBuilder alloc] init];
success = [rest FullRequestSb: @"PUT" uriPath: @"/AWS_ACCOUNT_ID/vaults/chilkat/access-policy" requestBody: sbRequestBody responseBody: sbResponseBody];
if (success != YES) {
    NSLog(@"%@",rest.LastErrorText);
    return;
}

int respStatusCode = [rest.ResponseStatusCode intValue];
if (respStatusCode >= 400) {
    NSLog(@"%@%d",@"Response Status Code = ",respStatusCode);
    NSLog(@"%@",@"Response Header:");
    NSLog(@"%@",rest.ResponseHeader);
    NSLog(@"%@",@"Response Body:");
    NSLog(@"%@",[sbResponseBody GetAsString]);
    return;
}

// Success is indicated by a 204 response status with an empty response body.
NSLog(@"%@%d",@"response status code = ",respStatusCode);