Skip to content

Commit bfd86ab

Browse files
committed
🐛 (infra-live): Add missing SES identity (#79)
The noreply identity was not allowed to send mail using SES service.
2 parents 9eb69a1 + 6c4711a commit bfd86ab

File tree

1 file changed

+6
-2
lines changed
  • infrastructure/live/external

1 file changed

+6
-2
lines changed

infrastructure/live/external/mail.tf

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,12 @@ resource "aws_ses_email_identity" "allowed_identities" {
2929
# --<Policies configuration>----------------------------------------------------
3030
data "aws_iam_policy_document" "transaction_mailer" {
3131
statement {
32-
actions = ["ses:SendEmail", "ses:SendRawEmail"]
33-
resources = [for _, id in aws_ses_email_identity.allowed_identities : id.arn]
32+
actions = ["ses:SendEmail", "ses:SendRawEmail"]
33+
resources = concat(
34+
[aws_ses_email_identity.noreply.arn],
35+
[for _, id in aws_ses_email_identity.allowed_identities : id.arn],
36+
)
37+
3438
condition {
3539
test = "StringEquals"
3640
variable = "ses:FromAddress"

0 commit comments

Comments
 (0)