AWS WorkMail can't send emails!

0

Hey, I'm trying to send emails with my newly created email account info@mydomain.com.

I'm always getting this email returned:

*Sending Email failed. Could not send email.

SubmitId: E5C4D5F784298A6BDD19AA964A874B40

Your administrator needs to give permissions to WorkMail to perform e-mail sending on your behalf. To give WorkMail sending permissions, follow the instructions here:

https://docs.aws.amazon.com/workmail/latest/adminguide/editing_domains.html*

The description in the link does not fit to the current UI, but I supposed I found the right place. So I created the following Policies related to the email account

{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/info@mydomain.com"
    }
  ]
}
  • the domain in SES:
{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/mydomain.com"
    }
  ]
}

I'm running out of ideas why I still can't send emails from WorkMail.

1 Risposta
1

Hi,

I'm sorry to hear you're experiencing problems with sending mail. It looks like the principal in the policy is incorrect. It looks like its the one for your account (which I have removed).

It should be for WorkMail to allow WorkMail to send mail using your domain. You can update it to:

  "Principal": {
    "Service": "workmail.eu-west-1.amazonaws.com"
  },

Kind regards, Robin

Edit: More details on this new Documentation page

AWS
ESPERTO
con risposta 2 anni fa
profile picture
ESPERTO
verificato un mese fa
  • Cool!, works now! But where could I've found this information myself? Thank you

  • Hi,

    The documentation for the WorkMail service principal will go live later today. The WorkMail service principal is new as before this change the policy would contain a WorkMail account Id. I will check if we can add extra warnings on the documentation page you received in the bounce message.

    Kind regards, Robin

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande