AWS WorkMail can't send emails!

0

Hey, I'm trying to send emails with my newly created email account info@mydomain.com.

I'm always getting this email returned:

*Sending Email failed. Could not send email.

SubmitId: E5C4D5F784298A6BDD19AA964A874B40

Your administrator needs to give permissions to WorkMail to perform e-mail sending on your behalf. To give WorkMail sending permissions, follow the instructions here:

https://docs.aws.amazon.com/workmail/latest/adminguide/editing_domains.html*

The description in the link does not fit to the current UI, but I supposed I found the right place. So I created the following Policies related to the email account

{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/info@mydomain.com"
    }
  ]
}
  • the domain in SES:
{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/mydomain.com"
    }
  ]
}

I'm running out of ideas why I still can't send emails from WorkMail.

gefragt vor 2 Jahren1071 Aufrufe
1 Antwort
1

Hi,

I'm sorry to hear you're experiencing problems with sending mail. It looks like the principal in the policy is incorrect. It looks like its the one for your account (which I have removed).

It should be for WorkMail to allow WorkMail to send mail using your domain. You can update it to:

  "Principal": {
    "Service": "workmail.eu-west-1.amazonaws.com"
  },

Kind regards, Robin

Edit: More details on this new Documentation page

AWS
EXPERTE
beantwortet vor 2 Jahren
profile picture
EXPERTE
überprüft vor einem Monat
  • Cool!, works now! But where could I've found this information myself? Thank you

  • Hi,

    The documentation for the WorkMail service principal will go live later today. The WorkMail service principal is new as before this change the policy would contain a WorkMail account Id. I will check if we can add extra warnings on the documentation page you received in the bounce message.

    Kind regards, Robin

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen