AWS SES

Amazon Simple Email Service (SES) is a cloud-based email sending service designed for high-volume, transactional, and marketing email delivery. It provides a cost-effective, scalable way to send email without managing your own mail server infrastructure.

With AWS SES, you can:

  • Send simple emails: Deliver one-off emails with plain text or HTML body content to individual recipients
  • Send templated emails: Use pre-defined templates with variable substitution (e.g., {{name}}, {{link}}) for personalized emails at scale
  • Send bulk emails: Deliver templated emails to large lists of recipients in a single API call, with per-destination data overrides
  • Manage email templates: Create, retrieve, list, and delete reusable email templates for transactional and marketing campaigns
  • Monitor account health: Retrieve your account's sending quota, send rate, and whether sending is currently enabled

In Sim, the AWS SES integration is designed for workflows that need reliable, programmatic email delivery — from access request notifications and approval alerts to bulk outreach and automated reporting. It pairs naturally with the IAM Identity Center integration for TEAM (Temporary Elevated Access Management) workflows, where email notifications are sent when access is provisioned, approved, or revoked.

Usage Instructions

Integrate AWS SES v2 into the workflow. Send simple, templated, and bulk emails. Manage email templates, identities, configuration sets, and the account suppression list, and retrieve account sending quota and verified identity information.

Actions

ses_send_email

Send an email via AWS SES using simple or HTML content

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
fromAddressstringYesVerified sender email address
toAddressesstringYesComma-separated list of recipient email addresses
subjectstringYesEmail subject line
bodyTextstringNoPlain text email body
bodyHtmlstringNoHTML email body
ccAddressesstringNoComma-separated list of CC email addresses
bccAddressesstringNoComma-separated list of BCC email addresses
replyToAddressesstringNoComma-separated list of reply-to email addresses
configurationSetNamestringNoSES configuration set name for tracking

Output

ParameterTypeDescription
messageIdstringSES message ID for the sent email

ses_send_templated_email

Send an email using an SES email template with dynamic template data

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
fromAddressstringYesVerified sender email address
toAddressesstringYesComma-separated list of recipient email addresses
templateNamestringYesName of the SES email template to use
templateDatastringYesJSON string of key-value pairs for template variable substitution
ccAddressesstringNoComma-separated list of CC email addresses
bccAddressesstringNoComma-separated list of BCC email addresses
configurationSetNamestringNoSES configuration set name for tracking

Output

ParameterTypeDescription
messageIdstringSES message ID for the sent email

ses_send_bulk_email

Send emails to multiple recipients using an SES template with per-recipient data

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
fromAddressstringYesVerified sender email address
templateNamestringYesName of the SES email template to use
destinationsstringYesJSON array of destination objects with toAddresses (string[]) and optional templateData (JSON string); falls back to defaultTemplateData when omitted
defaultTemplateDatastringNoDefault JSON template data used when a destination does not specify its own
configurationSetNamestringNoSES configuration set name for tracking

Output

ParameterTypeDescription
resultsarrayPer-destination send results with status and messageId
successCountnumberNumber of successfully sent emails
failureCountnumberNumber of failed email sends

ses_list_identities

List all verified email identities (email addresses and domains) in your SES account

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
pageSizenumberNoMaximum number of identities to return (1-1000)
nextTokenstringNoPagination token from a previous list response

Output

ParameterTypeDescription
identitiesarrayList of email identities with name, type, sending status, and verification status
nextTokenstringPagination token for the next page of results
countnumberNumber of identities returned

ses_get_account

Get SES account sending quota and status information

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key

Output

ParameterTypeDescription
sendingEnabledbooleanWhether email sending is enabled for the account
max24HourSendnumberMaximum emails allowed per 24-hour period
maxSendRatenumberMaximum emails allowed per second
sentLast24HoursnumberNumber of emails sent in the last 24 hours

ses_create_template

Create a new SES email template for use with templated email sending

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
templateNamestringYesUnique name for the email template
subjectPartstringYesSubject line template (supports {{variable}} substitution)
textPartstringNoPlain text version of the template body
htmlPartstringNoHTML version of the template body

Output

ParameterTypeDescription
messagestringConfirmation message for the created template

ses_get_template

Retrieve the content and details of an SES email template

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
templateNamestringYesName of the template to retrieve

Output

ParameterTypeDescription
templateNamestringName of the template
subjectPartstringSubject line of the template
textPartstringPlain text body of the template
htmlPartstringHTML body of the template

ses_list_templates

List all SES email templates in your account

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
pageSizenumberNoMaximum number of templates to return
nextTokenstringNoPagination token from a previous list response

Output

ParameterTypeDescription
templatesarrayList of email templates with name and creation timestamp
nextTokenstringPagination token for the next page of results
countnumberNumber of templates returned

ses_delete_template

Delete an existing SES email template

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
templateNamestringYesName of the template to delete

Output

ParameterTypeDescription
messagestringConfirmation message for the deleted template

ses_update_template

Update the subject, HTML, and text content of an existing SES email template

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
templateNamestringYesThe name of the template to update
subjectPartstringYesThe subject line of the template
htmlPartstringNoThe HTML body of the template
textPartstringNoThe plain text body of the template

Output

ParameterTypeDescription
messagestringConfirmation message

ses_put_suppressed_destination

Add an email address to the account-level SES suppression list

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailAddressstringYesThe email address to add to the suppression list
reasonstringYesThe reason the address is suppressed: BOUNCE or COMPLAINT

Output

ParameterTypeDescription
messagestringConfirmation message

ses_delete_suppressed_destination

Remove an email address from the account-level SES suppression list

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailAddressstringYesThe email address to remove from the suppression list

Output

ParameterTypeDescription
messagestringConfirmation message

ses_get_suppressed_destination

Retrieve details for a specific email address on the SES suppression list

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailAddressstringYesThe suppressed email address to look up

Output

ParameterTypeDescription
emailAddressstringThe suppressed email address
reasonstringThe reason the address is suppressed
lastUpdateTimestringWhen the address was added to the suppression list
messageIdstringThe message ID associated with the bounce or complaint event
feedbackIdstringThe feedback ID associated with the bounce or complaint event

ses_list_suppressed_destinations

List email addresses on the account-level SES suppression list

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
reasonsstringNoComma-separated suppression reasons to filter by: BOUNCE, COMPLAINT
startDatestringNoOnly include addresses suppressed after this ISO 8601 date
endDatestringNoOnly include addresses suppressed before this ISO 8601 date
pageSizenumberNoMaximum number of results to return
nextTokenstringNoPagination token from a previous list response

Output

ParameterTypeDescription
destinationsarrayList of suppressed destinations with email address, reason, and last update
nextTokenstringPagination token for the next page of results
countnumberNumber of suppressed destinations returned

ses_create_email_identity

Start verification of a new SES email address or domain identity

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailIdentitystringYesThe email address or domain to verify
dkimSigningAttributesjsonNoBring-your-own-DKIM signing attributes as JSON (domainSigningSelector, domainSigningPrivateKey, nextSigningKeyLength). Domain identities only.
tagsjsonNoJSON array of tags to associate with the identity: [{"key":"","value":""}]
configurationSetNamestringNoDefault configuration set to use when sending from this identity

Output

ParameterTypeDescription
identityTypestringThe identity type: EMAIL_ADDRESS or DOMAIN
verifiedForSendingStatusbooleanWhether the identity is verified and can send email
dkimAttributesjsonDKIM signing status and CNAME tokens for the identity

ses_delete_email_identity

Delete a verified SES email address or domain identity

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailIdentitystringYesThe email address or domain identity to delete

Output

ParameterTypeDescription
messagestringConfirmation message

ses_get_email_identity

Retrieve verification status, DKIM, Mail-From, and policy details for an SES identity

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailIdentitystringYesThe email address or domain identity to look up

Output

ParameterTypeDescription
identityTypestringThe identity type: EMAIL_ADDRESS or DOMAIN
verifiedForSendingStatusbooleanWhether the identity is verified and can send email
verificationStatusstringVerification status: PENDING, SUCCESS, FAILED, TEMPORARY_FAILURE, NOT_STARTED
feedbackForwardingStatusbooleanWhether bounce/complaint notifications are forwarded by email
configurationSetNamestringDefault configuration set for this identity
dkimAttributesjsonDKIM signing status and CNAME tokens for the identity
mailFromAttributesjsonCustom MAIL FROM domain configuration for the identity
policiesjsonSending authorization policies attached to the identity
tagsarrayTags associated with the identity
verificationInfojsonAdditional verification diagnostics (error type, last checked/success time)

ses_create_configuration_set

Create an SES configuration set to control tracking, delivery, reputation, sending, and suppression behavior for emails

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
configurationSetNamestringYesName of the configuration set (letters, numbers, hyphens, underscores)
customRedirectDomainstringNoCustom domain to use for open/click tracking links
httpsPolicystringNoHTTPS policy for tracking links: REQUIRE, REQUIRE_OPEN_ONLY, or OPTIONAL
tlsPolicystringNoWhether delivery requires TLS: REQUIRE or OPTIONAL
sendingPoolNamestringNoDedicated IP pool to associate with the configuration set
reputationMetricsEnabledbooleanNoWhether to collect reputation metrics for emails using this configuration set
sendingEnabledbooleanNoWhether sending is enabled for this configuration set
suppressedReasonsstringNoComma-separated reasons that trigger suppression: BOUNCE, COMPLAINT
tagsjsonNoJSON array of tags to associate with the configuration set: [{"key":"","value":""}]

Output

ParameterTypeDescription
messagestringConfirmation message

ses_send_custom_verification_email

Send a branded custom verification email to an address using a custom verification email template

Input

ParameterTypeRequiredDescription
regionstringYesAWS region (e.g., us-east-1)
accessKeyIdstringYesAWS access key ID
secretAccessKeystringYesAWS secret access key
emailAddressstringYesThe email address to verify
templateNamestringYesThe name of the custom verification email template to use
configurationSetNamestringNoConfiguration set to use when sending the verification email

Output

ParameterTypeDescription
messageIdstringSES message ID for the sent verification email

On this page