Add support for sending email via AWS SES #540

New Issue

MrUnknownDE · 2026-04-05T21:44:42+02:00

MrUnknownDE commented

2026-04-05 21:44:42 +02:00

Originally created by @txase on 5/29/2025

This code adds AWS SES (Simple Email Service) as an additional (optionally enabled) email transport. It uses the same default AWS SDK config that the s3 file support uses.

This is the second piece of functionality from the AWS Serverless RFC (#5591), following the recent merge of AWS S3 support for files (#5626). I plan to add docs for using all the AWS features together once each feature has been merged.

Requirements for use

An AWS account with SES enabled:
- An email or domain identity for your sending address must be validated in SES, see SES docs for details
- The identity must not have a Default Configuration Set (You can delete the default configuration set if you accidentally created it)
Build vaultwarden with either the ses or aws feature
Run vaultwarden with:
- USE_AWS_SES=true
- SMTP_FROM=<sending email address>
- AWS_PROFILE=<profile name> (If not using a default AWS config profile. You may also use any other standard AWS env vars to configure SDK credentials.)

*Originally created by @txase on 5/29/2025* This code adds [AWS SES (Simple Email Service)](https://aws.amazon.com/ses/) as an additional (optionally enabled) email transport. It uses the same default AWS SDK config that the s3 file support uses. > This is the second piece of functionality from the AWS Serverless RFC (#5591), following the recent merge of AWS S3 support for files (#5626). I plan to add docs for using all the AWS features together once each feature has been merged. ## Requirements for use * An AWS account with SES enabled: * An email or domain identity for your sending address must be validated in SES, see [SES docs](https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html) for details * The identity **must not** have a _Default Configuration Set_ (You can delete the default configuration set if you accidentally created it) * Build vaultwarden with either the `ses` or `aws` feature * Run vaultwarden with: * `USE_AWS_SES=true` * `SMTP_FROM=<sending email address>` * `AWS_PROFILE=<profile name>` (If not using a default AWS config profile. You may also use any other standard [AWS env vars](https://docs.aws.amazon.com/sdkref/latest/guide/environment-variables.html) to configure SDK credentials.)

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#540