The tier-behavior tests only exercise SecurityLevel.HIGH and SecurityLevel.LOW, for both SecureBucket and TieredSecureBucketDefaults. MEDIUM is a fully supported tier with its own row in the tier tables, but nothing asserts its behavior — a regression in the MEDIUM column of TIER_CONSTRUCT/TIER_VARIABLE would ship silently.
What to test
SecureBucket at SecurityLevel.MEDIUM: versioning, removal policy, access logging on/off, and the SecurityLevel: Medium tag, per the tier table.TieredSecureBucketDefaults({ securityLevel: SecurityLevel.MEDIUM }): injected tier-variable values, and that CIS-critical fields are still enforced.
Mirror the structure of the existing HIGH/LOW tests so the three tiers read side by side.
Acceptance criteria
- All three tiers have equivalent test coverage for both the construct and the injector.
The tier-behavior tests only exercise
SecurityLevel.HIGHandSecurityLevel.LOW, for bothSecureBucketandTieredSecureBucketDefaults.MEDIUMis a fully supported tier with its own row in the tier tables, but nothing asserts its behavior — a regression in the MEDIUM column ofTIER_CONSTRUCT/TIER_VARIABLEwould ship silently.What to test
SecureBucketatSecurityLevel.MEDIUM: versioning, removal policy, access logging on/off, and theSecurityLevel: Mediumtag, per the tier table.TieredSecureBucketDefaults({ securityLevel: SecurityLevel.MEDIUM }): injected tier-variable values, and that CIS-critical fields are still enforced.Mirror the structure of the existing HIGH/LOW tests so the three tiers read side by side.
Acceptance criteria