Chilkat Tools

CreateKey TCL Example

AWS Key Management Service

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set rest [new_CkRest]

set authAws [new_CkAuthAws]

CkAuthAws_put_AccessKey $authAws "AWS_ACCESS_KEY"
CkAuthAws_put_SecretKey $authAws "AWS_SECRET_KEY"

# Don't forget to change the region to your particular region. (Also make the same change in the call to Connect below.)
CkAuthAws_put_Region $authAws "us-west-2"
CkAuthAws_put_ServiceName $authAws "kms"
# SetAuthAws causes Chilkat to automatically add the following headers: Authorization, X-Amz-Date
CkRest_SetAuthAws $rest $authAws

# URL: https://kms.us-west-2.amazonaws.com/
# Use the same region as specified above.
set success [CkRest_Connect $rest "kms.us-west-2.amazonaws.com" 443 1 1]
if {$success != 1} then {
    puts "ConnectFailReason: [CkRest_get_ConnectFailReason $rest]"
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    delete_CkAuthAws $authAws
    exit
}

# The following code creates the JSON request body.
# The JSON created by this code is shown below.

# Use this online tool to generate code from sample JSON:
# Generate Code to Create JSON

set json [new_CkJsonObject]

CkJsonObject_UpdateInt $json "BypassPolicyLockoutSafetyCheck" 123
CkJsonObject_UpdateString $json "CustomerMasterKeySpec" "string"
CkJsonObject_UpdateString $json "CustomKeyStoreId" "string"
CkJsonObject_UpdateString $json "Description" "string"
CkJsonObject_UpdateString $json "KeySpec" "string"
CkJsonObject_UpdateString $json "KeyUsage" "string"
CkJsonObject_UpdateInt $json "MultiRegion" 123
CkJsonObject_UpdateString $json "Origin" "string"
CkJsonObject_UpdateString $json "Policy" "string"
CkJsonObject_UpdateString $json "Tags[0].TagKey" "string"
CkJsonObject_UpdateString $json "Tags[0].TagValue" "string"

# The JSON request body created by the above code:

# {
#   "BypassPolicyLockoutSafetyCheck": boolean,
#   "CustomerMasterKeySpec": "string",
#   "CustomKeyStoreId": "string",
#   "Description": "string",
#   "KeySpec": "string",
#   "KeyUsage": "string",
#   "MultiRegion": boolean,
#   "Origin": "string",
#   "Policy": "string",
#   "Tags": [
#     {
#       "TagKey": "string",
#       "TagValue": "string"
#     }
#   ]
# }

CkRest_AddHeader $rest "Content-Type" "application/x-amz-json-1.1"
CkRest_AddHeader $rest "X-Amz-Target" "TrentService.CreateKey"

set sbRequestBody [new_CkStringBuilder]

CkJsonObject_EmitSb $json $sbRequestBody
set sbResponseBody [new_CkStringBuilder]

set success [CkRest_FullRequestSb $rest "POST" "/" $sbRequestBody $sbResponseBody]
if {$success != 1} then {
    puts [CkRest_lastErrorText $rest]
    delete_CkRest $rest
    delete_CkAuthAws $authAws
    delete_CkJsonObject $json
    delete_CkStringBuilder $sbRequestBody
    delete_CkStringBuilder $sbResponseBody
    exit
}

set respStatusCode [CkRest_get_ResponseStatusCode $rest]
puts "response status code = $respStatusCode"
if {$respStatusCode != 200} then {
    puts "Response Header:"
    puts [CkRest_responseHeader $rest]
    puts "Response Body:"
    puts [CkStringBuilder_getAsString $sbResponseBody]
    delete_CkRest $rest
    delete_CkAuthAws $authAws
    delete_CkJsonObject $json
    delete_CkStringBuilder $sbRequestBody
    delete_CkStringBuilder $sbResponseBody
    exit
}

set jResp [new_CkJsonObject]

CkJsonObject_LoadSb $jResp $sbResponseBody

# The following code parses the JSON response.
# A sample JSON response is shown below the sample code.

# Use this online tool to generate parsing code from sample JSON:
# Generate Parsing Code from JSON

set Arn [CkJsonObject_stringOf $jResp "KeyMetadata.Arn"]
set AWSAccountId [CkJsonObject_stringOf $jResp "KeyMetadata.AWSAccountId"]
set CloudHsmClusterId [CkJsonObject_stringOf $jResp "KeyMetadata.CloudHsmClusterId"]
set CreationDate [CkJsonObject_IntOf $jResp "KeyMetadata.CreationDate"]
set CustomerMasterKeySpec [CkJsonObject_stringOf $jResp "KeyMetadata.CustomerMasterKeySpec"]
set CustomKeyStoreId [CkJsonObject_stringOf $jResp "KeyMetadata.CustomKeyStoreId"]
set DeletionDate [CkJsonObject_IntOf $jResp "KeyMetadata.DeletionDate"]
set Description [CkJsonObject_stringOf $jResp "KeyMetadata.Description"]
set Enabled [CkJsonObject_IntOf $jResp "KeyMetadata.Enabled"]
set ExpirationModel [CkJsonObject_stringOf $jResp "KeyMetadata.ExpirationModel"]
set KeyId [CkJsonObject_stringOf $jResp "KeyMetadata.KeyId"]
set KeyManager [CkJsonObject_stringOf $jResp "KeyMetadata.KeyManager"]
set KeySpec [CkJsonObject_stringOf $jResp "KeyMetadata.KeySpec"]
set KeyState [CkJsonObject_stringOf $jResp "KeyMetadata.KeyState"]
set KeyUsage [CkJsonObject_stringOf $jResp "KeyMetadata.KeyUsage"]
set MultiRegion [CkJsonObject_IntOf $jResp "KeyMetadata.MultiRegion"]
set MultiRegionKeyType [CkJsonObject_stringOf $jResp "KeyMetadata.MultiRegionConfiguration.MultiRegionKeyType"]
set PrimaryKeyArn [CkJsonObject_stringOf $jResp "KeyMetadata.MultiRegionConfiguration.PrimaryKey.Arn"]
set Region [CkJsonObject_stringOf $jResp "KeyMetadata.MultiRegionConfiguration.PrimaryKey.Region"]
set Origin [CkJsonObject_stringOf $jResp "KeyMetadata.Origin"]
set PendingDeletionWindowInDays [CkJsonObject_IntOf $jResp "KeyMetadata.PendingDeletionWindowInDays"]
set ValidTo [CkJsonObject_IntOf $jResp "KeyMetadata.ValidTo"]
set i 0
set count_i [CkJsonObject_SizeOfArray $jResp "KeyMetadata.EncryptionAlgorithms"]
while {$i < $count_i} {
    CkJsonObject_put_I $jResp $i
    set strVal [CkJsonObject_stringOf $jResp "KeyMetadata.EncryptionAlgorithms[i]"]
    set i [expr $i + 1]
}
set i 0
set count_i [CkJsonObject_SizeOfArray $jResp "KeyMetadata.MacAlgorithms"]
while {$i < $count_i} {
    CkJsonObject_put_I $jResp $i
    set strVal [CkJsonObject_stringOf $jResp "KeyMetadata.MacAlgorithms[i]"]
    set i [expr $i + 1]
}
set i 0
set count_i [CkJsonObject_SizeOfArray $jResp "KeyMetadata.MultiRegionConfiguration.ReplicaKeys"]
while {$i < $count_i} {
    CkJsonObject_put_I $jResp $i
    set Arn [CkJsonObject_stringOf $jResp "KeyMetadata.MultiRegionConfiguration.ReplicaKeys[i].Arn"]
    set Region [CkJsonObject_stringOf $jResp "KeyMetadata.MultiRegionConfiguration.ReplicaKeys[i].Region"]
    set i [expr $i + 1]
}
set i 0
set count_i [CkJsonObject_SizeOfArray $jResp "KeyMetadata.SigningAlgorithms"]
while {$i < $count_i} {
    CkJsonObject_put_I $jResp $i
    set strVal [CkJsonObject_stringOf $jResp "KeyMetadata.SigningAlgorithms[i]"]
    set i [expr $i + 1]
}

# A sample JSON response body parsed by the above code:

# {
#   "KeyMetadata": {
#     "Arn": "string",
#     "AWSAccountId": "string",
#     "CloudHsmClusterId": "string",
#     "CreationDate": number,
#     "CustomerMasterKeySpec": "string",
#     "CustomKeyStoreId": "string",
#     "DeletionDate": number,
#     "Description": "string",
#     "Enabled": boolean,
#     "EncryptionAlgorithms": [
#       "string"
#     ],
#     "ExpirationModel": "string",
#     "KeyId": "string",
#     "KeyManager": "string",
#     "KeySpec": "string",
#     "KeyState": "string",
#     "KeyUsage": "string",
#     "MacAlgorithms": [
#       "string"
#     ],
#     "MultiRegion": boolean,
#     "MultiRegionConfiguration": {
#       "MultiRegionKeyType": "string",
#       "PrimaryKey": {
#         "Arn": "string",
#         "Region": "string"
#       },
#       "ReplicaKeys": [
#         {
#           "Arn": "string",
#           "Region": "string"
#         }
#       ]
#     },
#     "Origin": "string",
#     "PendingDeletionWindowInDays": number,
#     "SigningAlgorithms": [
#       "string"
#     ],
#     "ValidTo": number
#   }
# }

delete_CkRest $rest
delete_CkAuthAws $authAws
delete_CkJsonObject $json
delete_CkStringBuilder $sbRequestBody
delete_CkStringBuilder $sbResponseBody
delete_CkJsonObject $jResp
Chilkat Online Tools

CreateKey TCL Example

AWS Key Management Service
