Why does my S3 destination show AccessDenied?

Grant the IAM role s3:GetObject, s3:PutObject, and s3:DeleteObject on the bucket for your S3 destination.

Grant the IAM role s3:GetObject, s3:PutObject, and s3:DeleteObject on the bucket for your S3 destination.

With only s3:PutObject, uploads succeed but the dashboard connection test reports AccessDenied, so setup looks like it's failing even though data is still landing. Adding s3:GetObject and s3:DeleteObject makes the connection test pass.