Unable to receive verification mail from AWS Cognito

Question

I noticed that my registration and forgot password flow was broken due to user unable to receive any email from SES. Basically my cognito pool using SES as email provider and I using ARN of SES Identity with domain type and it working as well. But now a day seem like this functionality is broken and I noticed that it able to bind only Identity specific to email type (no more domain type in the list).

Is it doesn't support any more to using SES Identity with domain? On AWS console it provide only list of email but it was working with my application before (the earlier version of cognito which I need to provide SES Identity's ARN).

And it also mention on AWS document that it support to using domain (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-configure).

![My SES Identities](/media/postImages/original/IMCVnmwulrSumMFRdAV712fg)

![Cognito Email config without domain identity type](/media/postImages/original/IMvrnO3qEnRFS8nCPxA-9tDg)

Accepted Answer

It looks like Amazon Cognito user pools no longer support using an Amazon SES identity with a domain type. The documentation indicates that when configuring the email source for a Cognito user pool, you now select an Amazon SES identity that is specific to an email address rather than a domain.

Some things you can check:
* Verify that the Amazon SES identity you are specifying in the Cognito user pool configuration is for an individual email address that has been verified, rather than a domain identity.
* Use the `describe-user-pool`  CLI command to check the current email configuration for the Cognito user pool and ensure it is specifying a verified SES identity for an email address rather than a domain.
* If the existing configuration is still referencing a domain identity, you may need to update it to specify a verified SES identity for an individual email address instead. You can do this via the AWS console or by invoking the `update-user-pool`  CLI command.
* Also check that the SES identity you specify has permissions to send emails on behalf of the Cognito service via an SES sending authorization policy.

Unable to receive verification mail from AWS Cognito

相关内容