My Amazon account IS authorized for “AmazonSesSendingAccess“, which works great with Thunderbird. However, if I continue the FluentSMTP setup, when I enter my key and secret key and submit, I get “USER is not authorized to perform: ses:ListIdentities because no identity-based policy allows the ses:ListIdentities action”. I assume there’s some policy I can’t find that I need to apply to my Amazon account. Anyone know what the modern policy name is? Help?

Also, I am 100% unable to post a comment at https://fluentsmtp.com/docs/set-up-amazon-ses-in-fluent-smtp/ , which makes me fear that the site and plugin are not well supported. “Security validation failed: you are typing too fast” (even after waiting 5 minutes) and “Security Token Expired” (after waiting 15).

thank you very much

We recently faced an issue with Offload SES, it doesn’t send emails at all (Not even queued). But when trying to send a test email it ends it normally and we receive it in our inbox.

I have checked the setup (IAM user / CNAME records to verify domain and email) but no luck, we can’t make this work at all

I have a staging site, and the plugin is working fine.

Screenshots: https://file.io/PtbWvJtq6acr

CLIENT -> SERVER: EHLO example.com
CLIENT -> SERVER: STARTTLS
CLIENT -> SERVER: EHLO example.com
CLIENT -> SERVER: AUTH LOGIN
CLIENT -> SERVER: [credentials hidden]CLIENT -> SERVER: [credentials hidden]SMTP ERROR: Password command failed: 535 Authentication Credentials Invalid
SMTP Error: Could not authenticate.CLIENT -> SERVER: QUIT
SMTP Error: Could not authenticate.

However, using phpmailer in my own PHP script, it works just fine.

$mail = new PHPMailer();
$mail->IsSMTP();
$mail->SMTPAuth = true;
$mail->Host = "email-smtp.us-west-2.amazonaws.com";
$mail->Username = "HJSKDIOUHDSJLD";
$mail->Password = "KHSDUWHSJHSJKLSHDWUHDSJHDS";
$mail->SMTPSecure = 'tls';
$mail->Port = 587;

Any ideas what the issue could be? I’ve triple checked that I have the correct login / password.

I followed the setup for Outlook/Office365, I created the App and Secret in Azure, but after I clicked on the “Authenticate with Office365 & Get Access Token” button and signed in, I only get an empty white box for “Your Access Code” and the url contains “/wp-json/fluent-smtp/outlook_callback?error=invalid_request&error_description= … ”

What could cause the issue ?
Any idea to solve it ?

Thank you.
Max.

I’ve followed the guide here https://deliciousbrains.com/wp-offload-ses/doc/custom-iam-policy-for-amazon-ses/ but when I use the policy outlined, it shows no verified senders in the plugin.

I can add a custom policy with full SES access to all resources and that works. If i limit it to the list provided in the above link with * resources, it shows no identities. Also if I grant full access (which does work) but then limit to my two identity ARNS, it again shows no results.

Any ideas what might be going wrong here?

Example of the policy that actuall works (but shows everything):

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "ses:*",
            "Resource": "*"
        }
    ]
}

Example of the policy with resources restricted that doesn’t show any verified senders:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "ses:*",
            "Resource": [
              "arn:aws:ses:ap-southeast-2:12345678910:identity/mydomain.com",
              "arn:aws:ses:ap-southeast-2:12345678910:identity/[email protected]"
            ]
        }
    ]
}

Also tried limiting the services with all permission as per those docs and that doesn’t work, eg:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ses:VerifyEmailIdentity",
                "ses:GetSendQuota",
                "ses:SendRawEmail",
                "ses:DeleteIdentity",
                "ses:GetIdentityVerificationAttributes",
                "ses:ListIdentities",
                "ses:VerifyDomainIdentity"
            ],
            "Resource": "*"
        }
    ]
}