Function test

apps/sim/lib/data-drains/destinations/s3.ts:167–200

({ config, credentials, signal })

  credentialsSchema: s3CredentialsSchema,

  async test({ config, credentials, signal }) {
    await assertEndpointIsPublic(config.endpoint)
    const client = buildClient(config, credentials)
    /** Real write probe so write-only IAM policies surface here, not at first run. */
    const probeKey = `${normalizePrefix(config.prefix)}.sim-drain-write-probe/${generateShortId(12)}`
    try {
      await withS3ErrorContext('test-put', () =>
        client.send(
          new PutObjectCommand({
            Bucket: config.bucket,
            Key: probeKey,
            Body: Buffer.alloc(0),
            ContentType: 'application/octet-stream',
            ServerSideEncryption: 'AES256',
          }),
          { abortSignal: signal }
        )
      )
      /** Best-effort cleanup: write was already proven, so a missing s3:DeleteObject must not fail the test. */
      try {
        await client.send(new DeleteObjectCommand({ Bucket: config.bucket, Key: probeKey }), {
          abortSignal: signal,
        })
      } catch (cleanupError) {
        logger.debug('S3 test write probe cleanup failed (non-fatal)', {
          bucket: config.bucket,
          key: probeKey,
          error: cleanupError,
        })
      }
    } finally {
      client.destroy()
    }
  },

  openSession({ config, credentials }) {
    const client = buildClient(config, credentials)