AllowListReceiptFilter

A list of ip addresses or ranges to allow list.

Adds an event destination to this configuration set.

addEventDestination

ConfigurationSet

configurationSetName

The https policy to use for tracking open and click events.

customTrackingHttpsPolicy

The custom subdomain that is used to redirect email recipients to the Amazon SES event tracking domain.

customTrackingRedirectDomain

The dedicated IP pool to associate with the configuration set.

dedicatedIpPool

If true, account-level suppression list is disabled;

email sent with this configuration set
will not use any suppression settings at all

disableSuppressionList

The maximum amount of time that Amazon SES API v2 will attempt delivery of email.

This value must be greater than or equal to 5 minutes and less than or equal to 14 hours.

maxDeliveryDuration

Whether to publish reputation metrics for the configuration set, such as bounce and complaint rates, to Amazon CloudWatch.

reputationMetrics

sendingEnabled

The reasons for which recipient email addresses should be automatically added to your account's suppression list.

suppressionReasons

Specifies whether messages that use the configuration set are required to use Transport Layer Security (TLS).

tlsPolicy

The Virtual Deliverability Manager (VDM) options that apply to the configuration set.

vdmOptions

ConfigurationSetEventDestination

The configuration set that contains the event destination.

configurationSet

destination

A name for the configuration set event destination.

configurationSetEventDestinationName

Whether Amazon SES publishes events to this destination.

enabled

The type of email sending events to publish to the event destination.

events

DedicatedIpPool

A name for the dedicated IP pool.

The name must adhere to specific constraints: it can only include
lowercase letters (a-z), numbers (0-9), underscores (_), and hyphens (-),
and must not exceed 64 characters in length.

dedicatedIpPoolName

The type of scailing mode to use for this IP pool.

Updating ScalingMode doesn't require a replacement if you're updating its value from `STANDARD` to `MANAGED`.
However, updating ScalingMode from `MANAGED` to `STANDARD` is not supported.

scalingMode

A rule added at the top of the rule set to drop spam/virus.

DropSpamReceiptRule

The name of the rule set that the receipt rule will be added to.

ruleSet

An ordered list of actions to perform on messages that match at least one of the recipient email addresses or domains specified in the receipt rule.

actions

An existing rule after which the new rule will be placed.

after

receiptRuleName

The recipient domains and email addresses that the receipt rule applies to.

recipients

scanEnabled

Whether Amazon SES should require that incoming email is delivered over a connection encrypted with Transport Layer Security (TLS).

Adds an IAM policy statement associated with this email identity to an IAM principal's policy.

[disable-awslint:no-grants]

grant

Permits an IAM principal the send email action.

Actions: SendEmail, SendRawEmail.

[disable-awslint:no-grants]

grantSendEmail

EmailIdentity

identity

The configuration set to associate with the email identity.

dkimIdentity

Whether the messages that are sent from the identity are signed using DKIM.

dkimSigning

Whether to receive email notifications when bounce or complaint events occur.

These notifications are sent to the address that you specified in the `Return-Path`
header of the original email.

You're required to have a method of tracking bounces and complaints. If you haven't set
up another mechanism for receiving bounce or complaint notifications (for example, by
setting up an event destination), you receive an email notification when these events
occur (even if this setting is disabled).

feedbackForwarding

The action to take if the required MX record for the MAIL FROM domain isn't found when you send an email.

mailFromBehaviorOnMxFailure

The custom MAIL FROM domain that you want the verified identity to use.

The MAIL FROM domain
must meet the following criteria:
  - It has to be a subdomain of the verified identity
  - It can't be used to receive email
  - It can't be used in a "From" address if the MAIL FROM domain is a destination for feedback
    forwarding emails

mailFromDomain

A receipt filter.

When instantiated without props, it creates a
block all receipt filter.

ReceiptFilter

policy

receiptFilterName

addAction

ReceiptRule

Adds a new receipt rule in this rule set.

The new rule is added after
the last added rule unless `after` is specified.

addRule

ReceiptRuleSet

Whether to add a first rule to stop processing messages that have at least one spam indicator.

dropSpam

receiptRuleSetName

The list of rules to add to this rule set.

Rules are added in the same
order as they appear in the list.

rules

Virtual Deliverability Manager (VDM) attributes.

VdmAttributes

Whether engagement metrics are enabled for your account.

engagementMetrics

Whether optimized shared delivery is enabled for your account.

optimizedSharedDelivery

Configuration sets let you create groups of rules that you can apply to the emails you send using Amazon SES.

For more information about using configuration sets, see [Using Amazon SES Configuration Sets](https://docs.aws.amazon.com/ses/latest/dg/using-configuration-sets.html) in the [Amazon SES Developer Guide](https://docs.aws.amazon.com/ses/latest/dg/) .

> *Required permissions:*
>
> To apply any of the resource options, you will need to have the corresponding AWS Identity and Access Management (IAM) SES API v2 permissions:
>
> - `ses:GetConfigurationSet`
>
> - (This permission is replacing the v1 *ses:DescribeConfigurationSet* permission which will not work with these v2 resource options.)
> - `ses:PutConfigurationSetDeliveryOptions`
> - `ses:PutConfigurationSetReputationOptions`
> - `ses:PutConfigurationSetSendingOptions`
> - `ses:PutConfigurationSetSuppressionOptions`
> - `ses:PutConfigurationSetTrackingOptions`

CfnConfigurationSet

An object that defines a MailManager archive that is used to preserve emails that you send using the configuration set.

archivingOptions

Specifies the name of the dedicated IP pool to associate with the configuration set and whether messages that use the configuration set are required to use Transport Layer Security (TLS).

deliveryOptions

The name of the configuration set. The name must meet the following requirements:.

- Contain only letters (a-z, A-Z), numbers (0-9), underscores (_), or dashes (-).
- Contain 64 characters or fewer.

name

An object that defines whether or not Amazon SES collects reputation metrics for the emails that you send that use the configuration set.

reputationOptions

An object that defines whether or not Amazon SES can send email that you send using the configuration set.

sendingOptions

An object that contains information about the suppression list preferences for your account.

suppressionOptions

An array of objects that define the tags (keys and values) that are associated with the configuration set.

trackingOptions

Specifies a configuration set event destination.

*Events* include message sends, deliveries, opens, clicks, bounces, and complaints. *Event destinations* are places that you can send information about these events to. For example, you can send event data to Amazon SNS to receive notifications when you receive bounces or complaints, or you can use Amazon Kinesis Data Firehose to stream data to Amazon S3 for long-term storage.

A single configuration set can include more than one event destination.

CfnConfigurationSetEventDestination

The name of the configuration set that contains the event destination.

An object that defines the event destination.

eventDestination

A list that contains contacts that have subscribed to a particular topic or topics.

CfnContactList

contactListName

A description of what the contact list is about.

description

An interest group, theme, or label within a list.

A contact list can have multiple topics.

topics

Resource Type definition for AWS::SES::CustomVerificationEmailTemplate.

CfnCustomVerificationEmailTemplate

The URL that the recipient of the verification email is sent to if his or her address is not successfully verified.

failureRedirectionUrl

The email address that the custom verification email is sent from.

fromEmailAddress

The URL that the recipient of the verification email is sent to if his or her address is successfully verified.

successRedirectionUrl

The content of the custom verification email.

The total size of the email must be less than 10 MB. The message body may contain HTML, with some limitations.

templateContent

The name of the custom verification email template.

templateName

The subject line of the custom verification email.

templateSubject

The tags (keys and values) associated with the tenant.

Create a new pool of dedicated IP addresses.

A pool can include one or more dedicated IP addresses that are associated with your AWS account . You can associate a pool with a configuration set. When you send an email that uses that configuration set, the message is sent from one of the addresses in the associated pool.

> You can't delete dedicated IP pools that have a `STANDARD` scaling mode with one or more dedicated IP addresses. This constraint doesn't apply to dedicated IP pools that have a `MANAGED` scaling mode.

CfnDedicatedIpPool

The name of the dedicated IP pool that the IP address is associated with.

poolName

The type of scaling mode.

The following options are available:

- `STANDARD` - The customer controls which IPs are part of the dedicated IP pool.
- `MANAGED` - The reputation and number of IPs are automatically managed by Amazon SES .

The `STANDARD` option is selected by default if no value is specified.

> Updating *ScalingMode* doesn't require a replacement if you're updating its value from `STANDARD` to `MANAGED` . However, updating *ScalingMode* from `MANAGED` to `STANDARD` is not supported.

An object that defines the tags (keys and values) that you want to associate with the pool.

Specifies an identity for using within SES.

An identity is an email address or domain that you use when you send email. Before you can use an identity to send email, you first have to verify it. By verifying an identity, you demonstrate that you're the owner of the identity, and that you've given Amazon SES API v2 permission to send email from the identity.

When you verify an email address, SES sends an email to the address. Your email address is verified as soon as you follow the link in the verification email. When you verify a domain without specifying the `DkimSigningAttributes` properties, OR only the `NextSigningKeyLength` property of `DkimSigningAttributes` , this resource provides a set of CNAME token names and values ( *DkimDNSTokenName1* , *DkimDNSTokenValue1* , *DkimDNSTokenName2* , *DkimDNSTokenValue2* , *DkimDNSTokenName3* , *DkimDNSTokenValue3* ) as outputs. You can then add these to the DNS configuration for your domain. Your domain is verified when Amazon SES detects these records in the DNS configuration for your domain. This verification method is known as Easy DKIM.

Alternatively, you can perform the verification process by providing your own public-private key pair. This verification method is known as Bring Your Own DKIM (BYODKIM). To use BYODKIM, your resource must include `DkimSigningAttributes` properties `DomainSigningSelector` and `DomainSigningPrivateKey` . When you specify this object, you provide a selector ( `DomainSigningSelector` ) (a component of the DNS record name that identifies the public key to use for DKIM authentication) and a private key ( `DomainSigningPrivateKey` ).

Additionally, you can associate an existing configuration set with the email identity that you're verifying.

CfnEmailIdentity

emailIdentity

Used to associate a configuration set with an email identity.

configurationSetAttributes

An object that contains information about the DKIM attributes for the identity.

dkimAttributes

If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for [Easy DKIM](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html) .

You can only specify this object if the email identity is a domain, as opposed to an address.

dkimSigningAttributes

Used to enable or disable feedback forwarding for an identity.

feedbackAttributes

Used to enable or disable the custom Mail-From domain configuration for an email identity.

mailFromAttributes

An array of objects that define the tags (keys and values) to associate with the email identity.

Creates an Add On instance for the subscription indicated in the request.

The resulting Amazon Resource Name (ARN) can be used in a conditional statement for a rule set or traffic policy.

CfnMailManagerAddonInstance

addonSubscriptionId

The tags used to organize, track, or control access for the resource.

For example, { "tags": {"key1":"value1", "key2":"value2"} }.

Creates a subscription for an Add On representing the acceptance of its terms of use and additional pricing.

The subscription can then be used to create an instance for use in rule sets or traffic policies.

CfnMailManagerAddonSubscription

The name of the Add On to subscribe to.

You can only have one subscription for each Add On name.

Valid Values: `TRENDMICRO_VSAPI | SPAMHAUS_DBL | ABUSIX_MAIL_INTELLIGENCE | VADE_ADVANCED_EMAIL_SECURITY`

addonName

The structure representing the address lists and address list attribute that will be used in evaluation of boolean expression.

CfnMailManagerAddressList

A user-friendly name for the address list.

addressListName

Creates a new email archive resource for storing and retaining emails.

CfnMailManagerArchive

archiveName

The Amazon Resource Name (ARN) of the KMS key for encrypting emails in the archive.

kmsKeyArn

The period for retaining emails in the archive before automatic deletion.

retention

Resource to provision an ingress endpoint for receiving email.

An ingress endpoint serves as the entry point for incoming emails, allowing you to define how emails are received and processed within your AWS environment.

CfnMailManagerIngressPoint

The identifier of an existing rule set that you attach to an ingress endpoint resource.

ruleSetId

The identifier of an existing traffic policy that you attach to an ingress endpoint resource.

trafficPolicyId

The type of the ingress endpoint to create.

type

The configuration of the ingress endpoint resource.

ingressPointConfiguration

A user friendly name for an ingress endpoint resource.

ingressPointName

The network type (IPv4-only, Dual-Stack, PrivateLink) of the ingress endpoint resource.

networkConfiguration

The update status of an ingress endpoint.

statusToUpdate

Resource to create an SMTP relay, which can be used within a Mail Manager rule set to forward incoming emails to defined relay destinations.

CfnMailManagerRelay

Authentication for the relay destination server—specify the secretARN where the SMTP credentials are stored.

authentication

serverName

serverPort

relayName

Resource to create a rule set for a Mail Manager ingress endpoint which contains a list of rules that are evaluated sequentially for each email.

CfnMailManagerRuleSet

Conditional rules that are evaluated for determining actions on email.

ruleSetName

Resource to create a traffic policy for a Mail Manager ingress endpoint which contains policy statements used to evaluate whether incoming emails should be allowed or denied.

Amazon SES

L2 Constructs10

AllowListReceiptFilter

ConfigurationSet

ConfigurationSetEventDestination

DedicatedIpPool

DropSpamReceiptRule

EmailIdentity

ReceiptFilter

ReceiptRule

ReceiptRuleSet

VdmAttributes

L1 Constructs21

CfnConfigurationSet

CfnConfigurationSetEventDestination

CfnContactList

CfnCustomVerificationEmailTemplate

CfnDedicatedIpPool

CfnEmailIdentity

CfnMailManagerAddonInstance

CfnMailManagerAddonSubscription

CfnMailManagerAddressList

CfnMailManagerArchive

CfnMailManagerIngressPoint

CfnMailManagerRelay

CfnMailManagerRuleSet

CfnMailManagerTrafficPolicy

CfnMultiRegionEndpoint

CfnReceiptFilter

CfnReceiptRule

CfnReceiptRuleSet

CfnTemplate

CfnTenant

CfnVdmAttributes

Get the Amazon SES Cheat Sheet

Quick Facts

Related Links