From f46c74a3cae678447bbf0e6b4e7e0cc31aeea3d2 Mon Sep 17 00:00:00 2001
From: Chris Lu <chris.lu@gmail.com>
Date: Sun, 8 Mar 2026 23:50:48 -0700
Subject: [PATCH] fix: add deferred user cleanup in
 TestIAMGroupUserDeletionSideEffect

Register t.Cleanup for the created user so it gets cleaned up
even if the test fails before the inline DeleteUser call.
---
 test/s3/iam/s3_iam_group_test.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/test/s3/iam/s3_iam_group_test.go b/test/s3/iam/s3_iam_group_test.go
index 9103180cc..343e0c6b6 100644
--- a/test/s3/iam/s3_iam_group_test.go
+++ b/test/s3/iam/s3_iam_group_test.go
@@ -567,6 +567,10 @@ func TestIAMGroupUserDeletionSideEffect(t *testing.T) {
 
 	_, err = iamClient.CreateUser(&iam.CreateUserInput{UserName: aws.String(userName)})
 	require.NoError(t, err)
+	t.Cleanup(func() {
+		// Best-effort: user may already be deleted by the test
+		iamClient.DeleteUser(&iam.DeleteUserInput{UserName: aws.String(userName)})
+	})
 
 	// Add user to group
 	_, err = iamClient.AddUserToGroup(&iam.AddUserToGroupInput{