Amazon Simple Email Service (Amazon SES) is designed for sending and receiving emails. It enables users to send transactional, marketing, or notification emails efficiently and securely at scale. It integrates well with other AWS services, providing a robust solution for managing email communications for businesses of all sizes.
You need to register identities, which can be domains or emails addresses that will be able to interact with SES (e.g. send and receive emails).
SMTP User
It's possible to connect to a SMTP server of AWS to perform actions instead of using the AWS API (or in addition). For this you need to create a user with a policy such as:
It's also possible to do this from the AWS console web.
Enumeration
Note that SES has 2 APIs: ses and sesv2. Some actions are in both APIs and others are just in one of the two.
# Get info about the SES accountawssesv2get-accountawssesget-account-sending-enabled# Check if enabled# Get registered domains and email addresses (identities)awsseslist-identitiesawssesv2list-email-identitiesawssesv2get-email-identity--email-identity<identity>#Get at once all the attributes# Get Resource Policies applied in the identityawsseslist-identity-policies--identity<identity>awssesget-identity-policies--identity<identity>--policy-names<policy>awssesv2get-email-identity-policies--email-identity<identity># Get attributes of the identity## Check if verifiedawssesget-identity-verification-attributes--identities<identity>## DKIM settings, relevant for identities that are domains not emailsawssesget-identity-dkim-attributes--identities<identity>## Get what happnes if the send mail from the identity failsawssesget-identity-mail-from-domain-attributes--identities<identity>## otifications attributesawssesget-identity-notification-attributes--identities<identity># Get email templatesawsseslist-templatesawssesget-template--template-name<name>awssesv2list-email-templatesawssesv2get-email-template--template-name<name># Get custom verification email templates## This is the email sent when an identity is verified, it can be customizedawsseslist-custom-verification-email-templatesawssesv2list-custom-verification-email-templatesawssesget-custom-verification-email-template--template-name<name>awssesv2get-custom-verification-email-template--template-name<name># Get receipt rule sets## Receipt rules indicate how to handle incoming mail by executing an ordered list of actionsawsseslist-receipt-rule-setsawssesdescribe-receipt-rule-set--rule-set-name<name>awssesdescribe-receipt-rule-set--rule-set-name<name>--rule-name<name>## Metadata and receipt rules for the receipt rule set that is currently activeawssesdescribe-active-receipt-rule-set# Get suppressed destinationsawssesv2list-suppressed-destinationsawssesv2get-suppressed-destination--email-address<email># Get configuration sets## These are set of rules applied to the identities related to the configuration setawsseslist-configuration-setsawssesv2list-configuration-setsaws ses describe-configuration-set --configuration-set-name <name> --configuration-set-attribute-names eventDestinations trackingOptions deliveryOptions reputationOptions
awssesv2get-configuration-set--configuration-set-name<name>awssesv2get-configuration-set-event-destinations--configuration-set-name<name># Get Contacts listawssesv2list-contact-listsawssesv2list-contacts--contact-list-name<name>awssesv2get-contact-list--contact-list-name<name>awssesv2get-contact--contact-list-name<name>--email-address<name># Private IPsawssesv2list-dedicated-ip-poolsawssesv2get-dedicated-ip-pool--pool-name<name>awssesv2get-dedicated-ips--pool-name<name>#Only valid if ScalingMode is Standardawssesv2get-dedicated-ip--ip<ip># Misc## Get send quotaawssesget-send-quota## Get statisticsawssesget-send-statistics
