Set the Read permission state as Unknown if the response from the list calls does not find the expected key

plugin/service/storage/plugin.go

@@ -820,6 +820,7 @@ func dryRunValidation(ctx context.Context, state *awsStoragePersistedState, attr
 		st, permissions.Read = errors.ParseAWSError(err, "failed to list object")
 		errs = multierror.Append(errs, st.Err())
 	} else if res == nil || len(res.Contents) != 1 || *res.Contents[0].Key != objectKey {
+		permissions.Read = &pb.Permission{State: pb.StateType_STATE_TYPE_UNKNOWN, CheckedAt: timestamppb.Now()}
 		errs = multierror.Append(errs, status.New(codes.Aborted, fmt.Sprintf("list response did not contain the expected key: %+v", res)).Err())
 	}
 

plugin/service/storage/plugin_test.go

@@ -2688,7 +2688,7 @@ func TestStoragePlugin_ValidatePermissions(t *testing.T) {
 			expectedDetails: &pb.StorageBucketCredentialState{
 				State: &pb.Permissions{
 					Read: &pb.Permission{
-						State:     pb.StateType_STATE_TYPE_OK,
+						State:     pb.StateType_STATE_TYPE_UNKNOWN,
 						CheckedAt: timestamppb.Now(),
 					},
 					Write: &pb.Permission{