AWS WorkMail can't send emails!

0

Hey, I'm trying to send emails with my newly created email account info@mydomain.com.

I'm always getting this email returned:

*Sending Email failed. Could not send email.

SubmitId: E5C4D5F784298A6BDD19AA964A874B40

Your administrator needs to give permissions to WorkMail to perform e-mail sending on your behalf. To give WorkMail sending permissions, follow the instructions here:

https://docs.aws.amazon.com/workmail/latest/adminguide/editing_domains.html*

The description in the link does not fit to the current UI, but I supposed I found the right place. So I created the following Policies related to the email account

{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/info@mydomain.com"
    }
  ]
}
  • the domain in SES:
{
  "Version": "2012-10-17",
  "Id": "ExampleAuthorizationPolicy",
  "Statement": [
    {
      "Sid": "AuthorizeAccount",
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::AccountID:root"
      },
      "Action": [
        "ses:*",
        "ses:SendBounce",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:eu-west-1:AccountID:identity/mydomain.com"
    }
  ]
}

I'm running out of ideas why I still can't send emails from WorkMail.

1回答
1

Hi,

I'm sorry to hear you're experiencing problems with sending mail. It looks like the principal in the policy is incorrect. It looks like its the one for your account (which I have removed).

It should be for WorkMail to allow WorkMail to send mail using your domain. You can update it to:

  "Principal": {
    "Service": "workmail.eu-west-1.amazonaws.com"
  },

Kind regards, Robin

Edit: More details on this new Documentation page

AWS
エキスパート
回答済み 2年前
profile picture
エキスパート
レビュー済み 1ヶ月前
  • Cool!, works now! But where could I've found this information myself? Thank you

  • Hi,

    The documentation for the WorkMail service principal will go live later today. The WorkMail service principal is new as before this change the policy would contain a WorkMail account Id. I will check if we can add extra warnings on the documentation page you received in the bounce message.

    Kind regards, Robin

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ