Attempt to build a complete AWS SDK in Perl
This project is attempting to build an entire AWS SDK from the information that is stored in other AWS SDKs. Other AWS SDKs have a "data-driven" approach, meaning that the definitions for the method calls are stored in a data structure describing input and output parameters.
The project is actually generating all of it's classes from botocore
Project info:
Travis CI status:
Version on CPAN:
If you want to install and use Paws then just install it via cpan, cpanm, carton or the likes. If you want to contribute code: read on
If you want to develop a feature, or contribute code in some way, you need a development setup. This is done by cloning the repo into a local directory.
# Clone the repo. For what it's worth, you can clone from a fork too :)
git clone https://github.com/pplu/aws-sdk-perl.git
cd aws-sdk-perl
With carton you can install all the dependencies needed in a local environment, so you can play around with dependencies without affecting the system libraries. The cpanfile is used to track the dependencies needed.
It's possible that you need -dev libraries for compiling some of these modules. In Debian/Ubuntu these packages are
sudo apt-get install libxml2-dev libssl-dev
And now tell carton to install the dependecies in a local lib
carton install
# drop into a shell so perl can always find the local libraries
carton exec $SHELL -l
Now we'll pull the paws-maintained fork of boto (so we can generate the SDK)
make pull-other-sdks
Now we're ready to code away! Happy hacking.
builder-lib: Contains classes that convert the botocore definitions into perl classes.
auto-lib: Contains the auto-generated classes. Changes to code in this directory will be overwritten, so only commit autogenerated code; never handwritten code (see "Generating API").
lib: Contains roles and classes that the auto-generated classes use to call the API, sign requests, handle responses, etc.
Note: This step is not necessary if you want to try out the SDK. We commit in "auto-lib" the classes generated by the definitions to which the "botocore" submodule points to. If you're not developing the SDK, go directly to the "Trying it out" step :)
Execute command make pull-other-sdks This will do a git pull of some official AWS sdks that are data-driven, and used to generate the SDK.
To generate the API for a given API call:
./gen_classes.pl botocore/botocore/data/SERVICE/DATE/service-2.json
This will generate file(s) in auto-lib.
To generate all the APIs:
make gen-classes
The SDK is targeted at modern Perl versions (in support as per: http://perldoc.perl.org/perlpolicy.html#MAINTENANCE-AND-SUPPORT. Old versions may work, but no intention to support them is made. You can always install a modern version of perl with perlbrew or plenv in a breeze. We're running the test cases on Travis for all "supported" perl versions. If you want to support a lower version, you can contribute back. Acceptance of patches for older versions of Perl won't mean that the compatibility will be maintained long-term, although it will be tried :).
Dependencies are versioned in a cpanfile. If you have carton, just execute 'carton install' in the sdk directory, and all dependencies will be pulled in automatically into a local library path. After that use 'carton exec ...' to execute your scripts.
If you add a dependency, just add it to the cpanfile file. There are three sections:
- the general section is for dependencies that are needed only in runtime
- the test section is for dependecies needed to run the test suite
- the develop section is for dependencies needed for developers
carton install installs all dependencies in all sections (after all, we're in developer mode here)
Packaging is managed with Dist::Zilla. running dzil build will make a tar.gz suitable for uploading to CPAN
Each class for each API can be constructed in the following way:
Create a Perl script (myscript.pl)
#!/usr/bin/env perl
use Paws;
use Data::Printer;
my $iam = Paws->service('IAM');
my $summary = $iam->GetAccountSummary;
p $summary->SummaryMap;
also take a look at the CLI utility (see below) for fast testing)
There are various ways of transmitting credentials to the SDK. By default a ProviderChain is used. This chain tries to use the Environment, later the File, and later the InstanceProfile credential modules until it finds credentials. Other credential providers have to be passed explicitly when requesting a service.
my $svc = Paws->service('IAM', credentials => ...CredentialProvider...->new(...));
These Credential providers work as follows:
Paws::Credential::Environment
tries to find credentials in the process environment variables
- Access Key in AWS_ACCESS_KEY or AWS_ACCESS_KEY_ID
- Secret Key in AWS_SECRET_KEY or AWS_SECRET_ACCESS_KEY
- Session Token [optional] in AWS_SESSION_TOKEN
Paws::Credential::File
tries to find credentials in ~/.aws/credentials. This file is an ini formatted file as specified in http://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html#cli-config-files.
it will try to find keys aws_access_key_id, aws_secret_access_key and aws_session_token in the default profile, or in the profile specified by ENV variable AWS_DEFAULT_PROFILE.
Paws::Credential::InstanceProfile
Instance Profiles (Roles) are also supported, so if you're running on an instance with a Role, the SDK will automatically pick up credentials.
Paws::Credential::STS
With the STS Credential provider, you can use temporary federated credentials with optionally restricted permissions, obtained via the AWS STS service.
my $cred_provider = Paws::Credential::STS->new(
Name => 'MyName',
DurationSeconds => 900,
Policy => '{"Version":"2012-10-17","Statement":[{"Effect": "Allow","Action":["ec2:DescribeInstances"],"Resource":"*"}]}'
);
my $ec2 = Paws->service('EC2', credentials => $cred_provider, region => 'eu-west-1');
$ec2->DescribeInstances;
Paws::Credential::AssumeRole
With the AssumeRole provider you can enable cross account access (call other accounts APIs without needing them to provide you with access keys and secret keys.
my $ec2 = Paws->service('EC2',
region => 'eu-west-1',
credentials => Paws::Credential::AssumeRole->new(
RoleArn => 'arn:aws:iam::123456789012:role/AdminRole',
RoleSessionName => 'CrossAccountTest',
ExternalId => 'MyExternalId',
)
);
# get security groups from account 123456789012
$ec2->DescribeSecurityGroups();
Don't consider the SDK as "stable" code. There is a lot of experimenting going on. That said, I'm using it in production, so changes to the way you call APIs, although not guaranteed, are not prone to change because they are autogenerated. Expect changes around the way you obtain service classes, transmit credentials, etc. Look at the TODO for expected changes to come.
As of 2015-02 I'm documenting breaking changes in the Changes file. API changes that break stuff will be documented there. Please read the Changes file before updating your git clone.
Although the code isn't considered stable yet, it works, and more than one person is using it already. I recommend you to use a fixed checkout of the repo, via a git submodule, for example. Try to keep up-to-date by updating frequently, but read the Changes file before, so you can see if there is any before-seen breakage in the process.
Just load a class (via Paws->service). (note that there is also a method in Paws that lists all loadable service classes (the cli uses it, so try out the CLI!). If a service is not supported, it will warn on construction with an explicit "non supported API" message. Basically all query and json services are supported. RestXML and RestJSON services are in the coming.
All services get auto-generated POD documentation. perldoc a file to take a look at the documentation.
Paws comes with a command-line utility to exercise the SDK. Just like Paws is the namespace for the SDK, "paws" (in /bin) is the cli utility. It's quite rudimentary, but think of it as a quick way to try out calling services. Just call:
paws
to list all services. If a service isn't supported yet, it will die explicitly advising you that Paws doesn't support that service yet.
paws EC2 --region eu-west-1 DescribeInstances
Parameters needed in for DescribeInstances can be passed as a list of parameters (see https://metacpan.org/pod/ARGV::Struct) for complete documentation of how to pass parameters via command line.
paws EC2 --region eu-west-1 DescribeInstances Parameter1: ValueForParameter1 ListParameter: [ V1 V2 ] ComplexParam { Key1 Value1 Key2 Value 2 }
This code is distributed under the Apache v2 License
Luis Alberto Gimenez (@agimenez) for
- The git-fu cleaning up the "pull other sdks" code
- Credential Providers code
Srinvas (@kidambisrinivas) for testing, bug reporting and fixing
juair10 for corrections and testing
CHORNY for CPAN and cpanfile packaging corrections
Iñigo Tejedor for service endpoint resolution based on rules
codehead for helping fix SQS Queue Maps
mbartold for helping fix SQS MessageBatch functionality
coreymayer for reporting bug in RestXmlCaller
arc (Aaron Crane) for documentation patches
dtikhonov for LWP Caller and bug reporting/fixing
vivus-ignis for DynamoDB bug reporting and test scripts for DynamoDB
karenetheridge for bug reporting, pull requests and help
ioanrogers for fixing unicode issues in tests
ilmari for fixing issues with timestamps in Date and X-Amz-Date headers
stevecaldwell77 for contributing support for temporary credentials in S3
Gimpson for contributing documentation fixes
Roger Pettett for testing and contributing fixes for tests on MacOSX
Henri Yandell for help with licensing issues
Oriol Soriano (@ureesoriano) for contribution to API builders