// If the object you request does not exist,
			// the error Amazon S3 returns depends on
			// whether you also have the s3:ListBucket
			// permission.
			// * If you have the s3:ListBucket permission
			//   on the bucket, Amazon S3 will return an
			//   HTTP status code 404 ("no such key")
			//   error.
			// * if you don’t have the s3:ListBucket
			//   permission, Amazon S3 will return an HTTP
			//   status code 403 ("access denied") error.`

Klaus Post <******@****.***> 1756435188 +0200

	// Will return nil if the grid connection is not initialized yet.
	gridConn func() *grid.Connection
}

// S3PeerSys - S3 peer call system.
type S3PeerSys struct {
	peerClients []peerS3Client // Excludes self
	poolsCount  int
}

// NewS3PeerSys - creates new S3 peer calls.
func NewS3PeerSys(endpoints EndpointServerPools) *S3PeerSys {
	return &S3PeerSys{
		peerClients: newPeerS3Clients(endpoints),

    "s3:GetObject",
    "s3:GetObjectVersion",
    "s3:GetObjectVersionTagging",
    "s3:PutObject",
    "s3:DeleteObject",
    "s3:ReplicateObject",
    "s3:ReplicateDelete"
   ],
   "Resource": [
    "arn:aws:s3:::destbucket/*"
   ]
  }
 ]
}
```

        protocolHelper.init();

        // Initially s3 and gcs should not be valid
        assertFalse(protocolHelper.isValidFileProtocol("s3://bucket/path"));
        assertFalse(protocolHelper.isValidFileProtocol("gcs://bucket/path"));

        // Add s3 protocol dynamically
        protocolHelper.addFileProtocol("s3");
        assertTrue(protocolHelper.isValidFileProtocol("s3://bucket/path"));

        // Various S3 bucket and path formats
        assertEquals("s3://bucket/", wizardAction.convertCrawlingPath("s3://bucket/"));
        assertEquals("s3://my-bucket/", wizardAction.convertCrawlingPath("s3://my-bucket/"));
        assertEquals("s3://bucket.with.dots/path", wizardAction.convertCrawlingPath("s3://bucket.with.dots/path"));

| `s3:ObjectCreated:Put`           | `s3:ObjectCreated:CompleteMultipartUpload` | `s3:ObjectAccessed:Head`               |
| `s3:ObjectCreated:Post`          | `s3:ObjectRemoved:Delete`                  | `s3:ObjectRemoved:DeleteMarkerCreated` |
| `s3:ObjectCreated:Copy`          | `s3:ObjectAccessed:Get`                    |                                        |

        assertTrue(goAction.isFileSystemPath("s3://bucket/path/to/file.txt"));
        assertTrue(goAction.isFileSystemPath("s3://my-bucket/folder/document.pdf"));
        assertTrue(goAction.isFileSystemPath("s3://bucket/"));
        assertTrue(goAction.isFileSystemPath("s3://my-bucket-name/deep/nested/path/file.txt"));
        assertTrue(goAction.isFileSystemPath("s3://bucket-with-dashes/file"));
    }

    @Test

            "Effect": "Allow",
            "Action": ["s3:ListBucket"],
            "Resource": ["arn:aws:s3:::bucket1", "arn:aws:s3:::bucket2"]
        },
        {
            "Sid": "ReadWriteBucket1AndBucket2Objects",
            "Effect": "Allow",
            "Action": [
                "s3:DeleteObject",
                "s3:DeleteObjectVersion",
                "s3:GetObject",
                "s3:GetObjectVersion",

			// For metadata values like "ö", "ÄMÄZÕÑ S3", and "öha, das sollte eigentlich
			// funktionieren", tested against a real AWS S3 bucket, S3 may encode incorrectly. For
			// example, "ö" was encoded as =?UTF-8?B?w4PCtg==?=, producing invalid UTF-8 instead
			// of =?UTF-8?B?w7Y=?=. This mirrors errors like the ä½ in another string.
			//
			// S3 uses B-encoding (Base64) for non-ASCII-heavy metadata and Q-encoding