AWS::SES::EmailIdentityCertificateAssociates an AWS Certificate Manager certificate with a sender under an SES email identity, so that SES signs the sender's mail with S/MIME. Removing this resource removes only the association. The ACM certificate itself stays intact. SES stores the sender lower-cased, and this provider matches senders case-insensitively and preserves the casing from the template.
3 configurable properties. 3 required. Click a row to see details.
| Property | Type | Flags |
|---|---|---|
CertificateArn | string | RequiredCreate-only |
EmailIdentity | string | RequiredCreate-only |
FromAddress | string | RequiredCreate-only |
A minimal template with required properties and common optional ones.
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::SES::EmailIdentityCertificate
Resources:
MyResource:
Type: AWS::SES::EmailIdentityCertificate
Properties:
EmailIdentity: "my-emailidentity"
FromAddress: "value"
CertificateArn: "arn:aws:service:region:account:resource"Permissions CloudFormation needs in your IAM role to manage this resource.
ses:AssociateEmailIdentityCertificateses:ListEmailIdentityCertificatesses:DisassociateEmailIdentityCertificateses:ListEmailIdentityCertificatesses:ListEmailIdentityCertificatesses:ListEmailIdentityCertificatesses:ListEmailIdentityCertificatesEverything you need to know about SES on one page. HD quality, print-friendly.
Download Free InfographicEmailIdentityThese properties cannot be changed after the resource is created. Updating them triggers a replacement.
EmailIdentityFromAddressCertificateArn