🐛 (infra-live): Add missing SES identity (#79)

The noreply identity was not allowed to send mail using SES service.
chezmoi-sh · May 19, 2024 · 9f39128 · 9f39128
2 parents 4a3785a + a19c5f7
commit 9f39128
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/infrastructure/live/external/mail.tf b/infrastructure/live/external/mail.tf
@@ -29,8 +29,12 @@ resource "aws_ses_email_identity" "allowed_identities" {
 # --<Policies configuration>----------------------------------------------------
 data "aws_iam_policy_document" "transaction_mailer" {
   statement {
-    actions   = ["ses:SendEmail", "ses:SendRawEmail"]
-    resources = [for _, id in aws_ses_email_identity.allowed_identities : id.arn]
+    actions = ["ses:SendEmail", "ses:SendRawEmail"]
+    resources = concat(
+      [aws_ses_email_identity.noreply.arn],
+      [for _, id in aws_ses_email_identity.allowed_identities : id.arn],
+    )
+
     condition {
       test     = "StringEquals"
       variable = "ses:FromAddress"