AWS Cognito email through AWS SES sandbox

0

Hello, as state on AWS SES documentation, a sandbox is not able to send email to unverified email addresses: While your account is in the sandbox, you can only send email to addresses that you've verified Somehow using a generic and unverified email address on AWS Cognito that relys on a SES sandbox environment, bypass the rule and send the email anyway. I think this kind of behavior is a bit misleading as the sender is a sandbox and, as a sandbox, should not send email to anyone but provided ones. Why is it happening? Am i missing something?

1개 답변
2
수락된 답변

The behavior you observed of Cognito being able to send emails to unverified addresses from within the SES sandbox is likely due to how Cognito integrates with SES. When a Cognito user pool is configured to use SES for email, it is granted permissions via a service-linked role to send emails on behalf of users. This bypassses some of the normal restrictions of the SES sandbox. However, you are correct that in general, the SES sandbox is not meant to allow sending to unverified addresses. There are a few options to consider:

  • Verify the email addresses you want to test with so they are allowed within the sandbox.
  • Request a limit increase on your SES account to move it fully out of the sandbox by submitting a request through the AWS Support Center. This will allow sending to any addresses once approved.
  • Consider alternatives like using a development SES account not in sandbox mode for testing purposes before going to production.
profile picture
전문가
답변함 한 달 전
profile pictureAWS
전문가
검토됨 한 달 전
  • The problem is that i expected it to follow the SES rules instead of bypass them, so the dev pool won't contact any of our customers. Is it possible to make the pool follow the SES sandbox restrictions? EDIT: it is my fault, the problem relys on the Messaging configuration, it can use Send email with Amazon SES - Recommended or Send email with Cognito, the first option respect the SES verified identities, the second one is insulated from SES and it is normal that doesn't respect any restriction. I found it while checking it through your considerations, thank you :)

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠