(PowerShell) Set Container ACL

Azure Storage Blob Service REST API: Sample code to set the permissions of a container.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# Azure Blob Service Example: Set Container ACL
# See also: https://msdn.microsoft.com/en-us/library/azure/dd179391.aspx

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$rest = New-Object Chilkat.Rest

# Connect to the Azure Storage Blob Service
$bTls = $true
$port = 443
$bAutoReconnect = $true
# In this example, the storage account name is "chilkat".
$success = $rest.Connect("chilkat.blob.core.windows.net",$port,$bTls,$bAutoReconnect)
if ($success -ne $true) {
    $($rest.LastErrorText)
    exit
}

# Provide Azure Cloud credentials for the REST call.
$azAuth = New-Object Chilkat.AuthAzureStorage
$azAuth.AccessKey = "AZURE_ACCESS_KEY"
# The account name used here should match the 1st part of the domain passed in the call to Connect (above).
$azAuth.Account = "chilkat"
$azAuth.Scheme = "SharedKey"
$azAuth.Service = "Blob"
# This causes the "x-ms-version: 2020-08-04" header to be automatically added.
$azAuth.XMsVersion = "2020-08-04"
$success = $rest.SetAuthAzureStorage($azAuth)

# Note: The application does not need to explicitly set the following
# headers: x-ms-date, Authorization.  These headers
# are automatically set by Chilkat.

# The XML body of the request will look like this:

# <?xml version="1.0" encoding="utf-8"?>
# <SignedIdentifiers>
#   <SignedIdentifier> 
#     <Id>unique-character-value-of-up-to-64-chars</Id>
#     <AccessPolicy>
#       <Start>start-time</Start>
#       <Expiry>expiry-time</Expiry>
#       <Permission>abbreviated-permission-list</Permission>
#     </AccessPolicy>
#   </SignedIdentifier>
# </SignedIdentifiers>

# Generate a random 32-character string.
$prng = New-Object Chilkat.Prng
$randomId = $prng.RandomString(32,$true,$true,$true)

# Get the current system date/time in ISO 8061 format
$dt = New-Object Chilkat.CkDateTime
$dt.SetFromCurrentSystemTime()
$bLocal = $false
# Get the current date/time in ISO 8061 UTC format.
$curDtStr = $dt.GetAsTimestamp($bLocal)
# The expire time will be 365 days in the future.
$success = $dt.AddDays(365)
$expireDtStr = $dt.GetAsTimestamp($bLocal)

# Build the request:
$xml = New-Object Chilkat.Xml
$xml.Tag = "SignedIdentifiers"
$xSignedId = $xml.NewChild("SignedIdentifier","")
$xSignedId.NewChild2("Id",$randomId)
$xAccessPolicy = $xSignedId.NewChild("AccessPolicy","")
$xAccessPolicy.NewChild2("Start",$curDtStr)
$xAccessPolicy.NewChild2("Expiry",$expireDtStr)
$xAccessPolicy.NewChild2("Permission","rwd")

# Show the XML..
$($xml.GetXml())

# The expected response is a 200 response status code with no response body.
$responseStr = $rest.FullRequestString("PUT","/mycontainer?restype=container&comp=acl",$xml.GetXml())
if ($rest.LastMethodSuccess -ne $true) {
    $($rest.LastErrorText)
    exit
}

# When successful, the Azure Storage service will respond with a 200 response status code,
# with no response body.

if ($rest.ResponseStatusCode -ne 200) {
    # Examine the request/response to see what happened.
    $("response status code = " + $rest.ResponseStatusCode)
    $("response status text = " + $rest.ResponseStatusText)
    $("response header: " + $rest.ResponseHeader)
    $("response body (if any): " + $responseStr)
    $("---")
    $("LastRequestStartLine: " + $rest.LastRequestStartLine)
    $("LastRequestHeader: " + $rest.LastRequestHeader)
    exit
}

$("Success.")