fix(s3): return proper HTTP 400 for SSE-C validation errors (#1998)

scripts/s3-tests/unimplemented_tests.txt

@@ -16,9 +16,6 @@
 # - STS: Security Token Service
 # - Checksum: Full checksum validation
 # - Conditional writes: If-Match/If-None-Match for writes
-# - Object ownership: BucketOwnerEnforced/Preferred
-#
-# Total: all unimplemented S3 feature tests listed below (keep this comment in sync with the list)
 
 test_bucket_create_delete_bucket_ownership
 test_bucket_logging_owner
@@ -32,12 +29,9 @@ test_delete_bucket_encryption_kms
 test_delete_bucket_encryption_s3
 test_encryption_key_no_sse_c
 test_encryption_sse_c_invalid_md5
-test_encryption_sse_c_method_head
 test_encryption_sse_c_multipart_bad_download
 test_encryption_sse_c_no_key
 test_encryption_sse_c_no_md5
-test_encryption_sse_c_other_key
-test_encryption_sse_c_present
 test_get_bucket_encryption_kms
 test_get_bucket_encryption_s3
 test_get_versioned_object_attributes
@@ -104,21 +98,6 @@ test_versioning_obj_plain_null_version_overwrite_suspended
 test_versioning_obj_plain_null_version_removal
 test_versioning_obj_suspend_versions
 
-# Teardown issues (list_object_versions on non-versioned buckets)
-# These tests pass but have cleanup issues with list_object_versions
-test_bucket_list_encoding_basic
-test_bucket_listv2_delimiter_alt
-test_bucket_listv2_delimiter_basic
-test_bucket_listv2_delimiter_dot
-test_bucket_listv2_delimiter_empty
-test_bucket_listv2_delimiter_none
-test_bucket_listv2_delimiter_not_exist
-test_bucket_listv2_delimiter_percentage
-test_bucket_listv2_delimiter_prefix_ends_with_delimiter
-test_bucket_listv2_delimiter_unreadable
-test_bucket_listv2_delimiter_whitespace
-test_bucket_listv2_encoding_basic
-
 # Checksum and atomic write tests (require x-amz-checksum-* support)
 test_atomic_dual_write_1mb
 test_atomic_dual_write_4mb
@@ -130,50 +109,13 @@ test_atomic_read_8mb
 test_atomic_write_1mb
 test_atomic_write_4mb
 test_atomic_write_8mb
-test_set_bucket_tagging
 
-# Tests with implementation issues (need investigation)
-test_bucket_policy_acl
+# Tests with known issues (need further investigation)
 test_bucket_policy_different_tenant
-test_bucketv2_policy_acl
-test_multipart_resend_first_finishes_last
-
-# Multipart abort and policy issues
-test_abort_multipart_upload
 test_bucket_policy_multipart
-
-# Tests with prefix conflicts or ACL/tenant dependencies
-test_bucket_policy
-test_bucket_policy_allow_notprincipal
-test_bucket_policy_another_bucket
-test_bucket_policy_put_obj_acl
 test_bucket_policy_put_obj_grant
 test_bucket_policy_tenanted_bucket
-test_bucketv2_policy
-test_object_presigned_put_object_with_acl
 test_object_presigned_put_object_with_acl_tenant
-test_object_put_acl_mtime
 
-# ACL-dependent tests (PutBucketAcl not implemented)
-test_block_public_object_canned_acls
-test_block_public_put_bucket_acls
-test_get_authpublic_acl_bucket_policy_status
-test_get_nonpublicpolicy_acl_bucket_policy_status
-test_get_public_acl_bucket_policy_status
-test_get_publicpolicy_acl_bucket_policy_status
-test_ignore_public_acls
-
-# PublicAccessBlock and tag validation tests
-test_block_public_policy
-test_block_public_policy_with_principal
-test_get_public_block_deny_bucket_policy
-test_get_undefined_public_block
-test_put_excess_key_tags
-test_put_excess_tags
-test_put_excess_val_tags
-test_put_get_delete_public_block
-test_put_public_block
-
-# Object attributes and torrent tests
-test_create_bucket_no_ownership_controls
+# Object attributes
 test_get_checksum_object_attributes