Configures a domain hosted on Route53 to work with AWS Simple Email Service (SES)
- Ensure terraform is installed
- Ensure domain is registered in route53
- Ensure an s3 bucket exists and SES has write permissions to it
- If you have an existing rule set you can skip creating the dependent resource
- route53 zone id can be obtained by looking up the domain in route53 service
- Import the module called
ses_domain
and update its source property totrussworks/ses-domain/aws
and runterrafrom init
- The next step is to configure the module with minimum values for SES to start working
- Once fully configured run
terraform plan
to see the execution plan andterrafrom apply
to stand up SES
Creates the following resources:
- MX record pointing to AWS's SMTP endpoint
- TXT record for SPF validation
- Custom MAIL FROM domain
- CNAME records for DKIM verification
- SES Verfication for the domain
- SES is only available in us-east-1, us-west-2, and eu-west-1
- SES out of the box locks the service in development mode; please see this documentation on how to make it production ready. Until the service is in production mode you can only send emails to confirmed email accounts denoted in
from_addresses
module "ses_domain" {
source = "trussworks/ses-domain/aws"
domain_name = "example.com"
mail_from_domain = "email.example.com"
route53_zone_id = "${data.aws_route53_zone.SES_domain.zone_id}"
from_addresses = ["[email protected]", "[email protected]"]
dmarc_rua = "[email protected]"
receive_s3_bucket = "S3_bucket_with_write_permissions"
receive_s3_prefix = "path_to_store_recieved_emails"
ses_rule_set = "name-of-the-ruleset"
}
resource "aws_ses_receipt_rule_set" "name-of-the-ruleset" {
rule_set_name = "name-of-the-ruleset"
}
data "aws_route53_zone" "SES_domain" {
name = "example.com"
}
Name | Description | Type | Default | Required |
---|---|---|---|---|
dmarc_rua | Email address for capturing DMARC aggregate reports. | string | - | yes |
domain_name | The domain name to configure SES. | string | - | yes |
enable_verification | Control whether or not to verify SES DNS records. | string | true |
no |
from_addresses | List of email addresses to catch bounces and rejections | list | - | yes |
mail_from_domain | Subdomain (of the route53 zone) which is to be used as MAIL FROM address | string | - | yes |
receive_s3_bucket | Name of the S3 bucket to store received emails. | string | - | yes |
receive_s3_prefix | The key prefix of the S3 bucket to store received emails. | string | - | yes |
route53_zone_id | Route53 host zone ID to enable SES. | string | - | yes |
ses_rule_set | Name of the SES rule set to associate rules with. | string | - | yes |