I want to create Simple Mail Transfer Protocol (SMTP) credentials that I can use with Amazon Simple Email Service (Amazon SES) SMTP endpoints. Then, I want to authenticate to Amazon SES using the SMTP credentials.
Resolution
To create credentials for the Amazon SES SMTP interface, follow these steps:
Note: The credentials for the Amazon SES SMTP interface are different from the access keys that you create using AWS Identity and Access Management (IAM) for an SMTP user. To rotate your SMTP credentials, you can either create new SMTP credentials or convert your existing secret access key into the Amazon SES SMTP format.
- Open the Amazon SES console.
Important: The IAM user or role that you use to create the SMTP credentials must have permissions for iam:ListUsers, iam:CreateUser, iam:CreateAccessKey, and iam:PutUserPolicy.
- Because SMTP credentials are Regional, review the AWS Region selector in the navigation bar to confirm that you're in the correct Region.
- From the navigation pane, under Email Sending, choose SMTP Settings.
- Choose Create My SMTP Credentials.
- For IAM User Name, you can accept the default name, or enter a new name.
- Choose Create.
- Choose Download Credentials. This is the only time that you can download the SMTP credentials for this user.
By default, SMTP users are created with permissions for sending raw messages (ses:SendRawEmail). You can modify the SMTP user's permissions using IAM. For more information on Amazon SES permissions, see Identity and access management in Amazon SES.
After you create the SMTP credentials, you can configure the credentials to authenticate to Amazon SES depending on your email-sending method:
Related information
Obtaining Amazon SES SMTP credentials
Connecting to an Amazon SES SMTP endpoint