Lambda, SES without NAT

0

I can't use Lambda with custom C# code and SES client, without NAT. I have add Endpoint with com.amazonaws.eu-central-1.email-smtp, but not working.

For SES it's necessary NAT?

2 個答案
1
已接受的答案

I understand. With Endopoint it's not possible to use AWS SDK for SES, but need to use smtp auth. With this configuration, it's working good without NAT

Luca
已回答 1 個月前
profile picture
專家
已審閱 25 天前
  • Thanks for clarifying. Based on the SMTP endpoint provided in the original question, I thought you were trying to use SMTP endpoint.

1

Hello, based on 1, 2, and below note from doc, using SES VPCe with Lambda should be possible.

  • While VPC endpoints for SES can be used with any resource, for ease of test method, this example will have you use an EC2 instance as the resource. Because Amazon EC2 restricts email traffic over port 25 by default, you'll have to use a different port other than TCP 25, such as TCP 465, 587, 2465, or 2587.

I would suggest verifying the security group associated to the SES VPCe allowing the SMTP port you are using from Lambda, and your Lambda is in same VPC as your SES VPCe.

I would also suggest looking into this article to rule out any permissions/role issues.

psp
已回答 1 個月前
profile picture
專家
已審閱 25 天前
profile picture
專家
已審閱 1 個月前
  • It's all correct, VPC, Security Group, but SES not working and I can't log anything on CloudWatch... Of course locally on debug working all fine.

  • Have you configured your Amazon SES to function through a VPC Endpoint, following the guidelines provided in the AWS blog post about Amazon Simple Email Service (SES) for VPC Endpoints? Can you confirm this setup?

  • Yes. I use same security group for the lambda on Endpoints. Inbound and Outbound rule are 0.0.0.0/0, already configurated

  • I would suggest launching an EC2 instance in same VPC/Subnet as your Lambda function and run network troubleshooting commands. You may also try using VPC reachability analyzer to run the network check.

  • How and which will run network troubleshooting commands. You may also try using VPC reachability analyzer to run the network check?

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南