By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Unable to receive verification mail from AWS Cognito

0

I noticed that my registration and forgot password flow was broken due to user unable to receive any email from SES. Basically my cognito pool using SES as email provider and I using ARN of SES Identity with domain type and it working as well. But now a day seem like this functionality is broken and I noticed that it able to bind only Identity specific to email type (no more domain type in the list).

Is it doesn't support any more to using SES Identity with domain? On AWS console it provide only list of email but it was working with my application before (the earlier version of cognito which I need to provide SES Identity's ARN).

And it also mention on AWS document that it support to using domain (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-configure).

My SES Identities

Cognito Email config without domain identity type

Topics
Security, Identity, & ComplianceFront-End Web & MobileBusiness Applications
Tags
Amazon CognitoAmazon Simple Email Service
Language
English
Chanintorn Asavavichairoj
asked a month ago160 views
1 Answer
2
Accepted Answer

It looks like Amazon Cognito user pools no longer support using an Amazon SES identity with a domain type. The documentation indicates that when configuring the email source for a Cognito user pool, you now select an Amazon SES identity that is specific to an email address rather than a domain.

Some things you can check:

  • Verify that the Amazon SES identity you are specifying in the Cognito user pool configuration is for an individual email address that has been verified, rather than a domain identity.
  • Use the describe-user-pool CLI command to check the current email configuration for the Cognito user pool and ensure it is specifying a verified SES identity for an email address rather than a domain.
  • If the existing configuration is still referencing a domain identity, you may need to update it to specify a verified SES identity for an individual email address instead. You can do this via the AWS console or by invoking the update-user-pool CLI command.
  • Also check that the SES identity you specify has permissions to send emails on behalf of the Cognito service via an SES sending authorization policy.
profile picture
EXPERT
Giovanni Lauria
answered a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content