Xbase++
Amazon Glacier Set Vault Access Policy

Demonstrates how to set an access policy for a vault (will overwrite the existing policy).
Chilkat Xbase++ Downloads

Xbase++
LOCAL nSuccess
LOCAL oRest
LOCAL nBTls
LOCAL nPort
LOCAL nBAutoReconnect
LOCAL oAuthAws
LOCAL oJsonPolicy
LOCAL oJson
LOCAL oSbRequestBody
LOCAL oSbResponseBody
LOCAL nRespStatusCode

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

oRest := CreateObject("Chilkat.Rest")

//  Connect to the Amazon AWS REST server in the desired region.
nBTls := 1
nPort := 443
nBAutoReconnect := 1
nSuccess := oRest:Connect("glacier.us-west-2.amazonaws.com", nPort, nBTls, nBAutoReconnect)

//  Provide AWS credentials.
oAuthAws := CreateObject("Chilkat.AuthAws")
oAuthAws:AccessKey := "AWS_ACCESS_KEY"
oAuthAws:SecretKey := "AWS_SECRET_KEY"
oAuthAws:ServiceName := "glacier"
oAuthAws:Region := "us-west-2"

nSuccess := oRest:SetAuthAws(oAuthAws)

//  --------------------------------------------------------------------------
//  Note: The above REST connection and setup of the AWS credentials
//  can be done once.  After connecting, any number of REST calls can be made.
//  The "auto reconnect" property passed to rest.Connect indicates that if
//  the connection is lost, a REST method call will automatically reconnect
//  if needed.
//  --------------------------------------------------------------------------

//  For more information, see Glacier Set Vault Access Policy Reference Documentation
//  
oRest:AddHeader("x-amz-glacier-version", "2012-06-01")

//  Create the following JSON
//  Use this online tool to generate the code from sample JSON: 
//  Generate Code to Create JSON

//  {
//    "Version": "2012-10-17",
//    "Statement": [
//      {
//        "Sid": "Define-owner-access-rights",
//        "Effect": "Allow",
//        "Principal": {
//          "AWS": "arn:aws:iam::AWS_ACCOUNT_ID:root"
//        },
//        "Action": "glacier:DeleteArchive",
//        "Resource": "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat"
//      }
//    ]
//  }

oJsonPolicy := CreateObject("Chilkat.JsonObject")
oJsonPolicy:UpdateString("Version", "2012-10-17")
oJsonPolicy:UpdateString("Statement[0].Sid", "Define-owner-access-rights")
oJsonPolicy:UpdateString("Statement[0].Effect", "Allow")
oJsonPolicy:UpdateString("Statement[0].Principal.AWS", "arn:aws:iam::AWS_ACCOUNT_ID:root")
oJsonPolicy:UpdateString("Statement[0].Action", "glacier:DeleteArchive")
//  Notice here the name of the vault: "chilkat".  Change it to your vault name.  Also use your actual AWS account ID.
oJsonPolicy:UpdateString("Statement[0].Resource", "arn:aws:glacier:us-west-2:AWS_ACCOUNT_ID:vaults/chilkat")

//  Wrap the above JSON in this JSON:

//  {
//     "Policy": "{  ... the above JSON ... }"
//  }
oJson := CreateObject("Chilkat.JsonObject")
oJson:UpdateString("Policy", oJsonPolicy:Emit())

oSbRequestBody := CreateObject("Chilkat.StringBuilder")
oJson:EmitSb(oSbRequestBody)

oSbResponseBody := CreateObject("Chilkat.StringBuilder")
nSuccess := oRest:FullRequestSb("PUT", "/AWS_ACCOUNT_ID/vaults/chilkat/access-policy", oSbRequestBody, oSbResponseBody)
IF (nSuccess != 1)
    ? oRest:LastErrorText
    oRest:destroy()
    oAuthAws:destroy()
    oJsonPolicy:destroy()
    oJson:destroy()
    oSbRequestBody:destroy()
    oSbResponseBody:destroy()
    RETURN
ENDIF

nRespStatusCode := oRest:ResponseStatusCode
IF (nRespStatusCode >= 400)
    ? "Response Status Code = " + Str(nRespStatusCode)
    ? "Response Header:"
    ? oRest:ResponseHeader
    ? "Response Body:"
    ? oSbResponseBody:GetAsString()
    oRest:destroy()
    oAuthAws:destroy()
    oJsonPolicy:destroy()
    oJson:destroy()
    oSbRequestBody:destroy()
    oSbResponseBody:destroy()
    RETURN
ENDIF

//  Success is indicated by a 204 response status with an empty response body.
? "response status code = " + Str(nRespStatusCode)

oRest:destroy()
oAuthAws:destroy()
oJsonPolicy:destroy()
oJson:destroy()
oSbRequestBody:destroy()
oSbResponseBody:destroy()