Our website is being developed, using SES to send mail. I had an anti-spam problem last time, so I fixed it temporarily by setting it up as follows:
- Rotate SES SMTP password.
- Rotate and delete all root and AWS Identity and Access Management (IAM) access keys.
- Delete any potentially unauthorized IAM users, and then change the password for all other IAM users.
- Remove any resources not created by us.
- Never store sensitive information such as passwords or access keys on third party websites or repositories, and ensure only approved users have access to your login information.
We also creating IAM Policies for Access to SES with the restricting below:
- Restricting the Recipient Addresses
- Restricting the "From" Address
- Restricting the Recipient Addresses
And then, we also setup SPF, DKIM for own domain to help prevent phishing and spoofing base on suggestion in the page below:
https://docs.aws.amazon.com/ses/latest/dg/email-authentication-methods.html
If we keep the settings above on production environment, we will not be able to send mail to domains that are not in the settings.
Can anyone guide me to solve this problem?
AWS 공식업데이트됨 2년 전
