SQL Server

Amazon Glacier Get Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to retrieve the access-policy subresource set on the vault SQL Server

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @success int
    SELECT @success = 0

    -- This example requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @rest int
    EXEC @hr = sp_OACreate 'Chilkat.Rest', @rest OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    -- Connect to the Amazon AWS REST server in the desired region.
    DECLARE @bTls int
    SELECT @bTls = 1
    DECLARE @port int
    SELECT @port = 443
    DECLARE @bAutoReconnect int
    SELECT @bAutoReconnect = 1
    EXEC sp_OAMethod @rest, 'Connect', @success OUT, 'glacier.us-west-2.amazonaws.com', @port, @bTls, @bAutoReconnect

    -- Provide AWS credentials.
    DECLARE @authAws int
    EXEC @hr = sp_OACreate 'Chilkat.AuthAws', @authAws OUT

    EXEC sp_OASetProperty @authAws, 'AccessKey', 'AWS_ACCESS_KEY'
    EXEC sp_OASetProperty @authAws, 'SecretKey', 'AWS_SECRET_KEY'
    EXEC sp_OASetProperty @authAws, 'ServiceName', 'glacier'
    EXEC sp_OASetProperty @authAws, 'Region', 'us-west-2'

    EXEC sp_OAMethod @rest, 'SetAuthAws', @success OUT, @authAws

    -- --------------------------------------------------------------------------
    -- Note: The above REST connection and setup of the AWS credentials
    -- can be done once.  After connecting, any number of REST calls can be made.
    -- The "auto reconnect" property passed to rest.Connect indicates that if
    -- the connection is lost, a REST method call will automatically reconnect
    -- if needed.
    -- --------------------------------------------------------------------------

    -- 
    -- For more information, see Glacier Get Vault Access Policy Reference Documentation
    -- 
    EXEC sp_OAMethod @rest, 'AddHeader', @success OUT, 'x-amz-glacier-version', '2012-06-01'

    -- Get the access policy for the "chilkat" vault.
    DECLARE @sbResponseBody int
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbResponseBody OUT

    EXEC sp_OAMethod @rest, 'FullRequestNoBodySb', @success OUT, 'GET', '/AWS_ACCOUNT_ID/vaults/chilkat/access-policy', @sbResponseBody
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @rest, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        EXEC @hr = sp_OADestroy @sbResponseBody
        RETURN
      END

    DECLARE @respStatusCode int
    EXEC sp_OAGetProperty @rest, 'ResponseStatusCode', @respStatusCode OUT
    IF @respStatusCode >= 400
      BEGIN

        PRINT 'Response Status Code = ' + @respStatusCode

        PRINT 'Response Header:'
        EXEC sp_OAGetProperty @rest, 'ResponseHeader', @sTmp0 OUT
        PRINT @sTmp0

        PRINT 'Response Body:'
        EXEC sp_OAMethod @sbResponseBody, 'GetAsString', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @rest
        EXEC @hr = sp_OADestroy @authAws
        EXEC @hr = sp_OADestroy @sbResponseBody
        RETURN
      END

    -- Success is indicated by a 200 response status.

    PRINT 'response status code = ' + @respStatusCode

    DECLARE @json int
    EXEC @hr = sp_OACreate 'Chilkat.JsonObject', @json OUT

    EXEC sp_OAMethod @json, 'LoadSb', @success OUT, @sbResponseBody
    EXEC sp_OASetProperty @json, 'EmitCompact', 0

    -- Returns JSON such as this:
    -- {
    --   "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Define-owner-access-rights\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::9999999999999:root\"},\"Action\":\"glacier:DeleteArchive\",\"Resource\":\"arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat\"}]}"
    -- }

    -- Unwrap...
    DECLARE @jsonPolicy int
    EXEC @hr = sp_OACreate 'Chilkat.JsonObject', @jsonPolicy OUT

    EXEC sp_OAMethod @json, 'StringOf', @sTmp0 OUT, 'Policy'
    EXEC sp_OAMethod @jsonPolicy, 'Load', @success OUT, @sTmp0
    EXEC sp_OASetProperty @jsonPolicy, 'EmitCompact', 0

    EXEC sp_OAMethod @jsonPolicy, 'Emit', @sTmp0 OUT
    PRINT @sTmp0

    PRINT '----'

    -- The jsonPolicy contains:

    -- {
    --   "Version": "2012-10-17",
    --   "Statement": [
    --     {
    --       "Sid": "Define-owner-access-rights",
    --       "Effect": "Allow",
    --       "Principal": {
    --         "AWS": "arn:aws:iam::9999999999999:root"
    --       },
    --       "Action": "glacier:DeleteArchive",
    --       "Resource": "arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat"
    --     }
    --   ]
    -- }
    -- 

    -- Use this online tool to generate parsing code from sample JSON: 
    -- Generate Parsing Code from JSON

    -- To parse the above contents of jsonPolicy...
    DECLARE @Version nvarchar(4000)

    DECLARE @i int

    DECLARE @count_i int

    DECLARE @Sid nvarchar(4000)

    DECLARE @Effect nvarchar(4000)

    DECLARE @PrincipalAWS nvarchar(4000)

    DECLARE @Action nvarchar(4000)

    DECLARE @Resource nvarchar(4000)

    EXEC sp_OAMethod @jsonPolicy, 'StringOf', @Version OUT, 'Version'
    SELECT @i = 0
    EXEC sp_OAMethod @jsonPolicy, 'SizeOfArray', @count_i OUT, 'Statement'
    WHILE @i < @count_i
      BEGIN
        EXEC sp_OASetProperty @jsonPolicy, 'I', @i
        EXEC sp_OAMethod @jsonPolicy, 'StringOf', @Sid OUT, 'Statement[i].Sid'
        EXEC sp_OAMethod @jsonPolicy, 'StringOf', @Effect OUT, 'Statement[i].Effect'
        EXEC sp_OAMethod @jsonPolicy, 'StringOf', @PrincipalAWS OUT, 'Statement[i].Principal.AWS'
        EXEC sp_OAMethod @jsonPolicy, 'StringOf', @Action OUT, 'Statement[i].Action'
        EXEC sp_OAMethod @jsonPolicy, 'StringOf', @Resource OUT, 'Statement[i].Resource'
        SELECT @i = @i + 1
      END

    EXEC @hr = sp_OADestroy @rest
    EXEC @hr = sp_OADestroy @authAws
    EXEC @hr = sp_OADestroy @sbResponseBody
    EXEC @hr = sp_OADestroy @json
    EXEC @hr = sp_OADestroy @jsonPolicy


END
GO