How can I log all emails sent from AWS SES?

Question

I am using AWS SES to send emails from my domain, but I recently noticed that some emails are being sent from my domains that are not by me. I suspect that my account has been compromised and I want to log all emails sent from SES to investigate further. However, I also need to ensure that the log includes the content of each email, including the subject and body. How can I enable logging for all emails sent from my SES account so that I can track down the source of these unauthorized emails and examine their content? I would prefer logging to Cloudwatch or an S3 bucket.

Antonio_Lagrotteria · Accepted Answer

Hi,

I would look into configuration set https://docs.aws.amazon.com/ses/latest/dg/using-configuration-sets.html where you can send various data related to emails to a kinesis data firehose, which then can send data to s3.

You also can send data to cloudwatch as pointed out below:
https://docs.aws.amazon.com/ses/latest/dg/monitor-sending-using-event-publishing-setup.html

Hope it helps ;)

Riku_Kobayashi · Answer

Output to S3 using Kinesis Data Firehose  
The following blog is in Japanese, but contains example settings  
https://zenn.dev/isseeeeey55/articles/61b350c27e1040

How can I log all emails sent from AWS SES?

Relevant content