Xbase++

Amazon Glacier Get Vault Access Policy

See more Amazon Glacier Examples

Demonstrates how to retrieve the access-policy subresource set on the vault Xbase++

LOCAL nSuccess
LOCAL oRest
LOCAL nBTls
LOCAL nPort
LOCAL nBAutoReconnect
LOCAL oAuthAws
LOCAL oSbResponseBody
LOCAL nRespStatusCode
LOCAL oJson
LOCAL oJsonPolicy
LOCAL cVersion
LOCAL i
LOCAL nCount_i
LOCAL cSid
LOCAL cEffect
LOCAL cPrincipalAWS
LOCAL cAction
LOCAL cResource

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oRest := CreateObject("Chilkat.Rest")

//  Connect to the Amazon AWS REST server in the desired region.
nBTls := 1
nPort := 443
nBAutoReconnect := 1
nSuccess := oRest:Connect("glacier.us-west-2.amazonaws.com", nPort, nBTls, nBAutoReconnect)

//  Provide AWS credentials.
oAuthAws := CreateObject("Chilkat.AuthAws")
oAuthAws:AccessKey := "AWS_ACCESS_KEY"
oAuthAws:SecretKey := "AWS_SECRET_KEY"
oAuthAws:ServiceName := "glacier"
oAuthAws:Region := "us-west-2"

nSuccess := oRest:SetAuthAws(oAuthAws)

//  --------------------------------------------------------------------------
//  Note: The above REST connection and setup of the AWS credentials
//  can be done once.  After connecting, any number of REST calls can be made.
//  The "auto reconnect" property passed to rest.Connect indicates that if
//  the connection is lost, a REST method call will automatically reconnect
//  if needed.
//  --------------------------------------------------------------------------

//  For more information, see Glacier Get Vault Access Policy Reference Documentation
//  
oRest:AddHeader("x-amz-glacier-version", "2012-06-01")

//  Get the access policy for the "chilkat" vault.
oSbResponseBody := CreateObject("Chilkat.StringBuilder")
nSuccess := oRest:FullRequestNoBodySb("GET", "/AWS_ACCOUNT_ID/vaults/chilkat/access-policy", oSbResponseBody)
IF (nSuccess != 1)
    ? oRest:LastErrorText
    oRest:destroy()
    oAuthAws:destroy()
    oSbResponseBody:destroy()
    RETURN
ENDIF

nRespStatusCode := oRest:ResponseStatusCode
IF (nRespStatusCode >= 400)
    ? "Response Status Code = " + Str(nRespStatusCode)
    ? "Response Header:"
    ? oRest:ResponseHeader
    ? "Response Body:"
    ? oSbResponseBody:GetAsString()
    oRest:destroy()
    oAuthAws:destroy()
    oSbResponseBody:destroy()
    RETURN
ENDIF

//  Success is indicated by a 200 response status.
? "response status code = " + Str(nRespStatusCode)

oJson := CreateObject("Chilkat.JsonObject")
oJson:LoadSb(oSbResponseBody)
oJson:EmitCompact := 0

//  Returns JSON such as this:
//  {
//    "Policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Sid\":\"Define-owner-access-rights\",\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"arn:aws:iam::9999999999999:root\"},\"Action\":\"glacier:DeleteArchive\",\"Resource\":\"arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat\"}]}"
//  }

//  Unwrap...
oJsonPolicy := CreateObject("Chilkat.JsonObject")
oJsonPolicy:Load(oJson:StringOf("Policy"))
oJsonPolicy:EmitCompact := 0

? oJsonPolicy:Emit()
? "----"

//  The jsonPolicy contains:

//  {
//    "Version": "2012-10-17",
//    "Statement": [
//      {
//        "Sid": "Define-owner-access-rights",
//        "Effect": "Allow",
//        "Principal": {
//          "AWS": "arn:aws:iam::9999999999999:root"
//        },
//        "Action": "glacier:DeleteArchive",
//        "Resource": "arn:aws:glacier:us-west-2:9999999999999:vaults/chilkat"
//      }
//    ]
//  }
//  

//  Use this online tool to generate parsing code from sample JSON: 
//  Generate Parsing Code from JSON

//  To parse the above contents of jsonPolicy...

cVersion := oJsonPolicy:StringOf("Version")
i := 0
nCount_i := oJsonPolicy:SizeOfArray("Statement")
DO WHILE i < nCount_i
    oJsonPolicy:I := i
    cSid := oJsonPolicy:StringOf("Statement[i].Sid")
    cEffect := oJsonPolicy:StringOf("Statement[i].Effect")
    cPrincipalAWS := oJsonPolicy:StringOf("Statement[i].Principal.AWS")
    cAction := oJsonPolicy:StringOf("Statement[i].Action")
    cResource := oJsonPolicy:StringOf("Statement[i].Resource")
    i := i + 1
ENDDO

oRest:destroy()
oAuthAws:destroy()
oSbResponseBody:destroy()
oJson:destroy()
oJsonPolicy:destroy()