Skip to main content
Scaleway Object Storage speaks an S3-compatible wire protocol, but Cloud Adapter still provides the configured endpoint, identity boundary, name mapping, diagnostics, and documented behavior for the route.
AWS API requests pass through Tensor9 Cloud Adapter to Scaleway services.AWS API requests pass through Tensor9 Cloud Adapter to Scaleway services.

What you will prove

You will write, read, and delete one object through the adapter’s AWS S3 endpoint, then verify the same object through Scaleway’s native S3 endpoint with a separate verification profile. The S3 on Scaleway profile covers common CRUD, ranges, conditional requests, copy, batch operations, pagination, metadata, multipart upload, and versioning. SSE-KMS, bucket policy, notifications, ACL, and object lock are outside the route profile. Cloud Adapter also preserves S3 rejection of an invalid Content-MD5 rather than accepting a weaker backend result.

Prerequisites

  • an installed AWS-origin Cloud Adapter endpoint;
  • an S3 to Scaleway Object Storage service adapter;
  • origin-side AWS credentials for the adapter;
  • a separate Scaleway verification profile with read access to the test bucket;
  • a selected Scaleway region and native object-storage endpoint;
  • AWS CLI v2.

Set values

Use the actual Scaleway regional endpoint selected by your service adapter. AWS_REQUEST_CHECKSUM_CALCULATION=WHEN_REQUIRED keeps this smoke test on the required S3 checksum path. Validate optional flexible-checksum behavior separately if your application enables it. The commands below use an explicit --endpoint-url. To route every S3 client in the process instead, set AWS_ENDPOINT_URL_S3="$T9_CLOUD_ADAPTER_ENDPOINT" and omit the command-level override.

Write through Cloud Adapter

Verify natively in Scaleway

The verification profile is intentionally distinct from the origin profile. A successful native read proves target placement and bytes, not origin authentication.

Exercise integrity and error behavior

Request a missing key with get-object and confirm an AWS-shaped not-found response. S3 can return permission denied instead when the caller lacks permission to establish that the object is missing. If your workload supplies Content-MD5, add a test with a correct digest and a deliberate bad digest. The bad digest should be rejected before you rely on that integrity behavior. Do not begin with SSE-KMS or bucket-policy tests; they are outside this route profile.

Clean up

The current object should no longer be readable. Versioned or soft-delete-enabled targets can retain prior versions or recovery state; use an unversioned disposable target for this quickstart or remove the created version explicitly. Keep bucket deletion separate. A newly configured target bucket is empty; Cloud Adapter does not silently copy pre-existing objects or versions.

Before production

Test the exact Scaleway region, multipart sizes, ranges, conditionals, copy behavior, pagination, versioning, retry behavior, and quotas your application uses. Establish data migration and rollback plans separately from endpoint cutover. Preserve the origin and target request identifiers exposed by your application SDK in structured, redacted logs.