in4it / terraform-aws-ses-domain Goto Github PK

Configures a domain hosted on Route53 to work with AWS Simple Email Service (SES)

• Ensure terraform is installed
• Ensure domain is registered in route53
• Ensure an s3 bucket exists and SES has write permissions to it
• If you have an existing rule set you can skip creating the dependent resource
• route53 zone id can be obtained by looking up the domain in route53 service

1. Import the module called ses_domain and update its source property to trussworks/ses-domain/aws and run terrafrom init
2. The next step is to configure the module with minimum values for SES to start working
3. Once fully configured run terraform plan to see the execution plan and terrafrom apply to stand up SES

Creates the following resources:

• MX record pointing to AWS's SMTP endpoint
• TXT record for SPF validation
• Custom MAIL FROM domain
• CNAME records for DKIM verification
• SES Verfication for the domain

• SES is only available in us-east-1, us-west-2, and eu-west-1
• SES out of the box locks the service in development mode; please see this documentation on how to make it production ready. Until the service is in production mode you can only send emails to confirmed email accounts denoted in from_addresses

module "ses_domain" {
  source             = "trussworks/ses-domain/aws"
  domain_name        = "example.com"
  mail_from_domain   = "email.example.com"
  route53_zone_id    = "${data.aws_route53_zone.SES_domain.zone_id}"
  from_addresses     = ["[email protected]", "[email protected]"]
  dmarc_rua          = "[email protected]"
  receive_s3_bucket  = "S3_bucket_with_write_permissions"
  receive_s3_prefix   = "path_to_store_recieved_emails"
  ses_rule_set       = "name-of-the-ruleset"
}

resource "aws_ses_receipt_rule_set" "name-of-the-ruleset" {
  rule_set_name = "name-of-the-ruleset"
}

data "aws_route53_zone" "SES_domain" {
  name = "example.com"
}