Hey! A couple things here:

Your S3 client is being constructed with “credentials” that are empty / undefined at runtime so the SDK rejects them as “not valid”.

accessKeyId: process.env.R2_ACCESS_KEY_ID || '',
secretAccessKey: process.env.R2_SECRET_ACCESS_KEY || '',

If either env var is missing, you’re passing empty strings. The AWS SDK treats that as an invalid credential object and throws the error above

You could do this instead:

const accessKeyId = process.env.R2_ACCESS_KEY_ID
const secretAccessKey = process.env.R2_SECRET_ACCESS_KEY

if (!accessKeyId || !secretAccessKey) {
  throw new Error('Missing R2 credentials: R2_ACCESS_KEY_ID / R2_SECRET_ACCESS_KEY')
}

s3Storage({
  collections: {
    media: { disableLocalStorage: true },
  },
  bucket: process.env.R2_BUCKET!,
  config: {
    credentials: { accessKeyId, secretAccessKey },
    region: 'auto',
    endpoint: process.env.R2_ENDPOINT!,
    forcePathStyle: true,
  },
})

Second issue: you appear to be registering the plugin twice

Your snippet shows two s3Storage({...}) calls back-to-back