Add SES account level suppression list support

[idavidmcdonald]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

SES has three suppression lists

• global suppression list
• account level suppression list
• configuration set level suppression list

There is currently no way to configure the account level suppression list using Terraform so this is a feature request to add it.

There is already an open issue for being able to configure a configuration set level suppression list - https://github.com/hashicorp/terraform-provider-aws/issues/14320 but there is not one for configuring for the account level suppression list.

New or Affected Resource(s)

• aws_ses_account_level_suppression_list

Potential Terraform Configuration

resource "aws_ses_account_level_suppression_list" "only_suppress_complaint" {
    suppressed_reasons = ["COMPLAINT"]
}

There could maybe be some remit for also including the ability to put email addresses on to the suppression list in this resource (using https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_PutSuppressedDestination.html) but I'm not as sure on that and my suggested code above is more a starting example than a strong steer on what the resource should look like.

References

• https://docs.aws.amazon.com/sdk-for-go/api/service/sesv2/#SESV2.PutConfigurationSetSuppressionOptions
• https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_PutAccountSuppressionAttributes.html
• https://docs.aws.amazon.com/ses/latest/dg/sending-email-suppression-list.html

[chris-denning]

The description is slightly wrong. AWS makes it clear that there are only 2 suppression lists, not 3: global and account-level. Yes, you can configure how the account-level suppression list is used at an account level and/or a configuration set level, but any configuration-set level configuration still uses the account suppression list https://docs.aws.amazon.com/ses/latest/dg/sending-email-suppression-list-config-level.html