cisagov / cool-dns-cyber.dhs.gov

Terraform configuration to create and populate the cyber.dhs.gov zone.
Creative Commons Zero v1.0 Universal
3 stars 9 forks source link

Change policy to also allow removal of emails from the suppression list #27

Closed jsf9k closed 4 years ago

jsf9k commented 4 years ago

🗣 Description

This pull request adds permissions to the SesSendEmail-cyber.dhs.gov role to allow removal email addresses from the email suppression list.

💭 Motivation and Context

This change allows one to remove addresses from the email suppression list via the AWS CLI:

AWS_PROFILE=cool-dns-sessendemail-cyber.dhs.gov AWS_SHARED_CREDENTIALS_FILE=~/.aws/production_credentials AWS_DEFAULT_REGION=us-east-1 aws sesv2 delete-suppressed-destination --email-address user@example.com

We have found that removing addresses this way is preferable to removing them via the web UI, since the web UI gives no information as to whether the address was originally on the suppression list of not.

🧪 Testing

I have deployed these changes to our COOL production environment and successfully removed an email from the email suppression list.

🚥 Types of Changes

✅ Checklist