(CkPython) S3 Get Bucket Policy

Demonstrates how to send a GET request to fetch the policy of a specified bucket. The following information is quoted from the AWS REST API reference documentation at http://docs.aws.amazon.com/AmazonS3/latest/API/RESTBucketGETpolicy.html

To use this operation, you must have GetPolicy permissions on the specified bucket, and you must be the bucket owner.

If you don't have GetPolicy permissions, Amazon S3 returns a 403 Access Denied error. If you have the correct permissions, but you're not the bucket owner, Amazon S3 returns a 405 Method Not Allowed error. If the bucket does not have a policy, Amazon S3 returns a 404 Policy Not found error. There are restrictions about who can create bucket policies and which objects in a bucket they can apply to. For more information, go to Using Bucket Policies.

Important: This example requires Chilkat v9.5.0.66 or greater.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Important: This example requires Chilkat v9.5.0.66 or greater.

rest = chilkat.CkRest()

# Connect to the Amazon AWS REST server in the desired region.
bTls = True
port = 443
bAutoReconnect = True
success = rest.Connect("s3-us-west-2.amazonaws.com",port,bTls,bAutoReconnect)

# Provide AWS credentials.
authAws = chilkat.CkAuthAws()
authAws.put_AccessKey("AWS_ACCESS_KEY")
authAws.put_SecretKey("AWS_SECRET_KEY")
authAws.put_ServiceName("s3")

# This particular bucket is in the Oregon region, as opposed to the US Standard,
# therefore the Region must be set appropriately.
# Also note that we connected to "s3-us-west-2.amazonaws.com".
authAws.put_Region("us-west-2")

success = rest.SetAuthAws(authAws)

# Note: The above REST connection and setup of the AWS credentials
# can be done once.  After connecting, any number of REST calls can be made.
# The "auto reconnect" property passed to rest.Connect indicates that if
# the connection is lost, a REST method call will automatically reconnect
# if needed.
# --------------------------------------------------------------------------

# Set the bucket name via the HOST header.
# In this case, the bucket name is "chilkat.ocean".
# Note that the Host header should use "bucketName.s3.amazonaws.com", not "bucketName.s3-us-west-2.amazonaws.com"
rest.put_Host("chilkat.ocean.s3.amazonaws.com")

# Get the policy.
responseJsonStr = rest.fullRequestNoBody("GET","/?policy")
if (rest.get_LastMethodSuccess() != True):
    print(rest.lastErrorText())
    sys.exit()

# When successful, the S3 Storage service will respond with a 200 response code,
# with an XML body.  
if (rest.get_ResponseStatusCode() != 200):
    # Examine the request/response to see what happened.
    print("response status code = " + str(rest.get_ResponseStatusCode()))
    print("response status text = " + rest.responseStatusText())
    print("response header: " + rest.responseHeader())
    print("response body: " + responseJsonStr)
    print("---")
    print("LastRequestStartLine: " + rest.lastRequestStartLine())
    print("LastRequestHeader: " + rest.lastRequestHeader())

print("response body: " + responseJsonStr)

# Load the JSON and display in a more human-readable manner:
json = chilkat.CkJsonObject()
json.Load(responseJsonStr)
json.put_EmitCompact(False)
print(json.emit())

# Sample output:

# 	{ 
# 	  "Version": "2012-10-17",
# 	  "Statement": [
# 	    { 
# 	      "Effect": "Allow",
# 	      "Resource": "arn:aws:s3.asp">chilkat.ocean/",
# 	      "Principal": "*"
# 	    }
# 	  ]
# 	}
#