How do I find out which IAM user sent an email through Amazon SES?

Short description

Use Amazon SES event publishing with an Amazon CloudWatch destination to view more information about sent or delivered emails. This information on CloudWatch includes the IAM user who sent the email.

Resolution

Before you begin, you must have:

• A verified email address or domain in Amazon SES.
• Permissions to use Amazon SES and CloudWatch.

Create a configuration set with CloudWatch as the event destination

Complete the following steps:

1. Open the Amazon SES console.

2. From the navigation pane, choose Configuration sets.

3. Choose Create set.

4. For Configuration set name, enter a name for the configuration set. For example, enter CallerIdentity.

5. Choose Create set.

6. Choose the Event destinations tab, and then choose Add destination.

7. For Event types, select Sends, and then choose Next.

8. For Destination options, choose CloudWatch.

9. For Name, enter a name for the event destination. For example, enter NameOfCallerIdentity.

10. For Amazon CloudWatch dimensions, enter the following:
    For Value source, select Message tag.
    For Dimension name, enter a name for the dimension. For example, enter ses:caller-identity.
    For Default value, enter the same value that you entered for Name.

11. Choose Next, and then choose Add destination.

Send a test email from Amazon SES

Complete the following steps:

1. Open the Amazon SES console.
2. From the navigation pane, choose Identities.
3. In Identities, choose your verified Email address or Domain.
4. From the Summary page, choose Send test email.
5. Choose the Scenario dropdown list, and then select your preferred test email scenario.
6. For Subject, enter a subject line for the test email.
7. Choose the Configuration set dropdown list, and then choose the configuration set that you created.
8. Choose Send test email.

Check CloudWatch for the metric on the test email

Complete the following steps:

1. Open the CloudWatch console.
2. From the navigation pane, expand Metrics, and then choose All metrics.
3. From the Metrics page, choose SES.
4. Choose the dimension name that you entered when you created the configuration set. For example, choose ses:caller-identity.
5. Under the ses:caller-identity column, review the IAM user who sent the test email.

Related information

Retrieving Amazon SES event data from CloudWatch