AWS Cognito email through AWS SES sandbox

0

Hello, as state on AWS SES documentation, a sandbox is not able to send email to unverified email addresses: While your account is in the sandbox, you can only send email to addresses that you've verified Somehow using a generic and unverified email address on AWS Cognito that relys on a SES sandbox environment, bypass the rule and send the email anyway. I think this kind of behavior is a bit misleading as the sender is a sandbox and, as a sandbox, should not send email to anyone but provided ones. Why is it happening? Am i missing something?

1 回答
2
已接受的回答

The behavior you observed of Cognito being able to send emails to unverified addresses from within the SES sandbox is likely due to how Cognito integrates with SES. When a Cognito user pool is configured to use SES for email, it is granted permissions via a service-linked role to send emails on behalf of users. This bypassses some of the normal restrictions of the SES sandbox. However, you are correct that in general, the SES sandbox is not meant to allow sending to unverified addresses. There are a few options to consider:

  • Verify the email addresses you want to test with so they are allowed within the sandbox.
  • Request a limit increase on your SES account to move it fully out of the sandbox by submitting a request through the AWS Support Center. This will allow sending to any addresses once approved.
  • Consider alternatives like using a development SES account not in sandbox mode for testing purposes before going to production.
profile picture
专家
已回答 1 个月前
profile pictureAWS
专家
已审核 1 个月前
  • The problem is that i expected it to follow the SES rules instead of bypass them, so the dev pool won't contact any of our customers. Is it possible to make the pool follow the SES sandbox restrictions? EDIT: it is my fault, the problem relys on the Messaging configuration, it can use Send email with Amazon SES - Recommended or Send email with Cognito, the first option respect the SES verified identities, the second one is insulated from SES and it is normal that doesn't respect any restriction. I found it while checking it through your considerations, thank you :)

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则