Function newTestBackend

pkg/blobmanager/s3accesspoint/backend_test.go:264–271

--- helpers ----------------------------------------------------------- newTestBackend constructs a fully wired *Backend that uses static dummy AWS credentials so LoadDefaultConfig doesn't reach out to IMDS/SSO. The resulting STS client would only be invoked if a test path slipped past the fail-clos

(t *testing.T)

// the fail-closed guard — in which case the dummy creds would still
// trigger a fast, deterministic failure rather than a real AWS call.
func newTestBackend(t *testing.T) *Backend {
	t.Helper()
	return backendForCreds(t, &Credentials{
		AccessPointARN: "arn:aws:s3:us-east-1:123456789012:accesspoint/chainloop-org-abc",
		Region:         "us-east-1",
		BaseRoleARN:    "arn:aws:iam::123456789012:role/chainloop-cas-tenant",
	})
}

func backendForCreds(t *testing.T, creds *Credentials) *Backend {
	t.Helper()