Function S3ProviderForConfig

server/server.go:2260–2270

S3ProviderForConfig returns the effective S3 provider for the given DuckLake config.

(dlCfg DuckLakeConfig)

// redactSecretStatementError reduces an engine error from a CREATE SECRET
// statement to its error-class prefix ("Parser Error", "IO Error", ...) plus
// a fixed placeholder. RefreshS3Secret errors flow beyond internal logs —
// via the duckgres.s3_cache SET / session-create restore paths into
// client-facing error messages, the query log, and the admin recent-errors
// ring — so no engine detail may survive: DuckDB errors can echo the
// offending SQL, and the echo is ELLIPSIZED for long lines ("LINE 1:
// ...oken' ..."), so matching-and-replacing complete credential values is NOT
// sufficient — a truncated echo carries credential FRAGMENTS no exact match
// catches, and even the first line's `at or near "..."` token can hold
// string-literal content. Dropping everything after the class prefix is the
// only airtight shape (the repo precedent is usersecrets.RedactErrorForLog's
// whole-message placeholder; keeping the class preserves triage value at zero
// leak surface, and works regardless of where the credentials came from —
// dlCfg or buildAWSSdkSecret's internally-fetched ones).