CX-03
Configure connection — Amazon S3
Tenant/site runtime, exact source edition, typed provider settings, references to secrets/certificates, budgets and locality; review configuration diff.
Acceptance · Require meaningful provider-specific fields. Deny live mode when only synthetic configuration or missing native source contract exists. Operations createConnection, updateConnection
CS-CON-0109Amazon S3F10 · Object storage files and generic APIsT05DETAILstatus: proposed_targetqualification: not_run
CX-02 ProfileCX-03 Configure connectionCX-08 Source contractCX-11 LaboratoryCX-12 EvidenceCX-14 Qualification
Synthetic connector workspace. Every profile here is a proposed target. Nothing on this screen is a live, qualified or certified adapter, no payload is a captured vendor wire message, and the simulation engine has no code path to a real endpoint.
Connection configuration
What creating this does — and does not — do
Authentication mode declared by the profile
AWS IAM role and SigV4; SSE-KMS decrypt permission when applicable
Constraints to respect
ETag is not universally an MD5 checksum; listing is not a multi-page transactional snapshot; directory bucket rules differ.
Credential handling
Only an opaque reference is held. Secret material is never entered, displayed or stored in this workspace.
Reachability
Creating a connection proves nothing about reachability. Access tests (CX-05) remain blocked while the workspace is simulation-only.
Write-back
Any command path stays behind a separate action/permit boundary and is not exercised here.
no live endpoint is contacted
Existing simulated connections for this profile
None yet.