Technical manual
...
iR Engine on AWS
Email Service
4 min
set up simple email service (optional) if you want to enable email magiclink login, you will need to set up simple email service (ses) in the aws web client, go to ses > configuration > verified identities click create identity, then under 'identity type' select 'domain' enter the top level domain under the 'domain' field finally, click the 'create identity' button create smtp credentials you need to create smtp credentials in order to authorize ses these will show up as an iam user, but you must go through an ses specific process to get valid credentials; just creating an iam user with sesfullaccess will not work go to an ses page and select 'smtp settings', then click the button 'create smtp credentials' you can leave the default iam user name as is; click the create button you should be taken to a screen says a user has been created successfully click on 'show user smtp security credentials' you will see a username and password these credentials will go into the helm config file, under aws smtp user and aws smtp pass, respectively you must also fill in the region that you've created these credentials in, replacing \<ses region> in api extraenv smtp host move ses out of sandbox by default, ses domains are in sandbox mode, where they can only send emails to verified email addresses to request that the domain be moved out of sandbox mode, go to ses >email sending >sending statistics click on the button 'edit your account details' to open the modal set 'enable production access' to yes, leave mail type on 'transactional', then fill in the website url, add a use case description (basically just assure them that this is for account login only, not anything else), click the checkbox to agree to their tod, and click the button 'submit for review' it may take up to a few days for them to take action if the request is rejected, address their concerns once you have been approved, email login should work for any email address verifying test emails before you have production use for your ses domain, in order to log in you'll have to verify specific email addresses with ses go to ses >identity management >email addresses click on the button 'verify a new email address' enter the address you want to test with, then click 'verify this email address' you should soon receive an email with a link to verify it (it may go to your spam folder) once you've followed the link, you can log in with that address