React Native

Amazon Glacier Set Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to set an access policy for a vault (will overwrite the existing policy). React Native

import { AuthAws, JsonObject, Rest, StringBuilder } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  const rest = new Rest();

  // Connect to the Amazon AWS REST server in the desired region.
  const bTls = true;
  const port = 443;
  const bAutoReconnect = true;
  await rest.connectAsync('glacier.us-west-2.amazonaws.com', port, bTls, bAutoReconnect);

  // Provide AWS credentials.
  const authAws = new AuthAws();
  authAws.accessKey = 'AWS_ACCESS_KEY';
  authAws.secretKey = 'AWS_SECRET_KEY';
  authAws.serviceName = 'glacier';
  authAws.region = 'us-west-2';

  rest.setAuthAws(authAws);

  // --------------------------------------------------------------------------
  // Note: The above REST connection and setup of the AWS credentials
  // can be done once.  After connecting, any number of REST calls can be made.
  // The "auto reconnect" property passed to rest.Connect indicates that if
  // the connection is lost, a REST method call will automatically reconnect
  // if needed.
  // --------------------------------------------------------------------------

  // For more information, see Glacier Set Vault Access Policy Reference Documentation
  // 
  rest.addHeader('x-amz-glacier-version', '2012-06-01');

  // Create the following JSON
  // Use this online tool to generate the code from sample JSON: 
  // Generate Code to Create JSON

  // {
  //   "Version": "2012-10-17",
  //   "Statement": [
  //     {
  //       "Sid": "Define-owner-access-rights",
  //       "Effect": "Allow",
  //       "Principal": {
  //         "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
  //       },
  //       "Action": "glacier:DeleteArchive",
  //       "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
  //     }
  //   ]
  // }

  const jsonPolicy = new JsonObject();
  jsonPolicy.updateString('Version', '2012-10-17');
  jsonPolicy.updateString('Statement[0].Sid', 'Define-owner-access-rights');
  jsonPolicy.updateString('Statement[0].Effect', 'Allow');
  jsonPolicy.updateString('Statement[0].Principal.AWS', 'arn:aws:iam::AWS_ACCOUNT_ID:root');
  jsonPolicy.updateString('Statement[0].Action', 'glacier:DeleteArchive');
  // Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
  jsonPolicy.updateString('Statement[0].Resource', 'arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat');

  // Wrap the above JSON in this JSON:

  // {
  //    "Policy": "{  ... the above JSON ... }"
  // }
  const json = new JsonObject();
  json.updateString('Policy', jsonPolicy.emit());

  const sbRequestBody = new StringBuilder();
  json.emitSb(sbRequestBody);

  const sbResponseBody = new StringBuilder();
  try {
    await rest.fullRequestSbAsync('PUT', '/AWS_ACCOUNT_ID/vaults/chilkat/access-policy', sbRequestBody, sbResponseBody);
  } catch {
    console.log(rest.lastErrorText);
    return;
  }

  const respStatusCode = rest.responseStatusCode;
  if (respStatusCode >= 400) {
    console.log(`Response Status Code = ${respStatusCode}`);
    console.log('Response Header:');
    console.log(rest.responseHeader);
    console.log('Response Body:');
    console.log(sbResponseBody.getAsString());
    return;
  }

  // Success is indicated by a 204 response status with an empty response body.
  console.log(`response status code = ${respStatusCode}`);
}