o

�N�g�'�@s�dZd
dl
Z
e
�e�
Zdd�Z											ddd�
Z														dd	d
�
Z										ddd�
Z													dd
d�
Z	dd�Z
dS)a�
Connection module for Amazon S3

.. highlight:: yaml

:configuration: This module accepts explicit s3 credentials but can also utilize
    IAM roles assigned to the instance through Instance Profiles. Dynamic
    credentials are then automatically obtained from AWS API and no further
    configuration is necessary. More Information available at:

       http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html

    If IAM roles are not used you need to specify them either in a pillar or
    in the minion's config file::

        s3.keyid: GKTADJGHEIQSXMKKRBJ08H
        s3.key: askdjghsdfjkghWupUjasdflkdfklgjsdfjajkghs

    .. warning:: This is literally the pillar key ``s3.keyid`` or the config option ``s3.keyid``,
        not::

            s3:
              keyid: blah

    A ``service_url`` may also be specified in the configuration::

        s3.service_url: s3.amazonaws.com

    A ``role_arn`` may also be specified in the configuration::

        s3.role_arn: arn:aws:iam::111111111111:role/my-role-to-assume

    If a ``service_url`` is not specified, the default is ``s3.amazonaws.com``. This
    may appear in various documentation as an "endpoint". A comprehensive list
    for Amazon S3 may be found at:

        http://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region

    The ``service_url`` will form the basis for the final endpoint that is used to
    query the service.

    Path style can be enabled::

        s3.path_style: True

    This can be useful if you need to use Salt with a proxy for a S3 compatible storage.

    You can use either HTTPS protocol or HTTP protocol::

        s3.https_enable: True

    SSL verification may also be turned off in the configuration::

        s3.verify_ssl: False

    This is required if using S3 bucket names that contain a period, as
    these will not match Amazon's S3 wildcard certificates. Certificate
    verification is enabled by default.

    AWS region may be specified in the configuration::

        s3.location: eu-central-1

    Default is ``us-east-1``.

    This module should be usable to query other S3-like services, such as
    Eucalyptus.

.. highlight:: bash

:depends: requests
�Nc
Csd
S)z7
    Should work on any modern Python installation
    T�rrr�C/opt/saltstack/salt/lib/python3.10/site-packages/salt/modules/s3.py�__virtual__OsrcCsPt|||||||	|
|�	\	}}}}}}}	}
}t
d
d||
||||||||	|
|d�
S)z�
    Delete a bucket, or delete an object from a bucket.


    CLI Example to delete a bucket::

        salt myminion s3.delete mybucket

    CLI Example to delete an object from a bucket::

        salt myminion s3.delete mybucket remoteobject
    �s3.queryZDELETE)
�method�bucket�path�action�key�keyid�	kms_keyid�service_url�
verify_ssl�location�role_arn�
path_style�https_enable��_get_keyZ	__utils__)rrr	r
rr
rrrrrrrrr�deleteVsH$








��






















�r�FcC�Tt|||||	|
|||
�	\	}}}}}	}
}}}
t
d
d||
||||||	|||
|||
d�S)a
    List the contents of a bucket, or return an object from a bucket. Set
    return_bin to True in order to retrieve an object wholesale. Otherwise,
    Salt will attempt to parse an XML response.

    CLI Example to list buckets:

        salt myminion s3.get

    CLI Example to list the contents of a bucket:

        salt myminion s3.get mybucket

    CLI Example to return the binary contents of an object:

        salt myminion s3.get mybucket myfile.png return_bin=True

    CLI Example to save the binary contents of an object to a local file:

        salt myminion s3.get mybucket myfile.png local_file=/tmp/myfile.png

    It is also possible to perform an action on a bucket. Currently, S3
    supports the following actions::

        acl
        cors
        lifecycle
        policy
        location
        logging
        notification
        tagging
        versions
        requestPayment
        versioning
        website

    To perform an action on a bucket:

        salt myminion s3.get mybucket myfile.png action=acl
    rZGET�rrr�
return_bin�
local_filer	r
rrr
rrrrrr�rrrr	rr
rr
rrrrrrrrr�get�sLC








��
























�rcCsPt||||||||	|
�	\	}}}}}}}}	}
t
d
d||
||||||d||	|
d�
S)z�
    Return the metadata for a bucket, or an object in a bucket.

    CLI Examples:

    .. code-block:: bash

        salt myminion s3.head mybucket
        salt myminion s3.head mybucket myfile.png
    r�HEADT)
rrrr
rrr
rrZfull_headersrrrr)rrr
rr
rrrrrrrrr�head�sH!








��






















�rcCr)a

    Create a new bucket, or upload an object to a bucket.

    CLI Example to create a bucket:

        salt myminion s3.put mybucket

    CLI Example to upload an object to a bucket:

        salt myminion s3.put mybucket remotepath local_file=/path/to/file
    r�PUTrrrrrr�put7
sL%








��
























�r c			Csb
|std
d�
rtd
d�
}|
std
d�
rtd
d�
}
|s*td
d�
r*td
d�
}|s8td
d�
r8td
d�
}|s<d}|durNtd
d�
du
rNtd
d�
}|durTd	}|durftd
d
�
du
rftd
d
�
}|durvtd
d�
rvtd
d�
}|dur�td
d�
du
r�td
d�
}|dur�d
}|dur�td
d�
du
r�td
d�
}|dur�d	}||
|||||||f	S)z5
    Examine the keys, and populate as necessary
    z
config.optionzs3.keyzs3.keyidz
aws.kms.keyidzs3.service_urlzs3.amazonaws.comNz
s3.verify_sslTzs3.locationzs3.role_arnz
s3.path_styleFzs3.https_enable)
Z__salt__)	r
rr
rrrrrrrrrr{
sJ




















�r)NNNNNNNNNNN)rrFNNNNNNNNNNN)
rNNNNNNNNN)
NFNNNNNNNNNNN)�__doc__�logging�	getLogger�__name__�logrrrrr rrrrr�<module>
srI
	










�B













�d









�@












�D