AWS ses documentation change
Summary
Added case-sensitivity clarification for suppression list management, removed redundant AWS CLI installation notes, added concurrent import job limit, and removed S3 bucket policy example
Security assessment
The case-sensitivity clarification helps prevent misconfiguration in API usage, which could indirectly impact security by ensuring proper suppression list management. However, there is no evidence of a specific security vulnerability being addressed. The removal of the S3 bucket policy example could introduce security risks if users misconfigure permissions, but this is not explicitly stated as a security fix.
Diff
diff --git a/ses/latest/dg/sending-email-suppression-list.md b/ses/latest/dg/sending-email-suppression-list.md index 90e11bc9c..8ad689b30 100644 --- a//ses/latest/dg/sending-email-suppression-list.md +++ b//ses/latest/dg/sending-email-suppression-list.md @@ -16,0 +17,4 @@ To bulk add or remove addresses, you must have production access. To learn more +###### Important + +SES account suppression lists are case-sensitive. When an email address is added to the suppression list, [email protected]_ , it is stored exactly as received, preserving the original case. While email sending functionality treats addresses with different cases as identical, for example, [email protected]_ is the same as [email protected]_ , API calls for suppression list management require an exact case match. Thus, when using APIs related to suppression list management, ensure you use the exact case of the email address as it appears in the suppression list. + @@ -49,0 +54,4 @@ You should consider the following factors when you use your account-level suppre +###### Note + +The procedures in the following sections assume that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). + @@ -96,4 +103,0 @@ You can also configure your Amazon SES account-level suppression so that it only -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -162,4 +165,0 @@ You can add individual addresses to your Amazon SES account-level suppression li -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -213,0 +214,2 @@ You can add addresses in bulk by first uploading your contact list into an Amazo + * You cannot run more than 20 concurrent import jobs. + @@ -239,31 +240,0 @@ In the preceding examples, replace `[email protected]` and `recipient2@exam - * Give SES permission to read the Amazon S3 object. - -When applied to an Amazon S3 bucket, the following policy gives SES permission to read that bucket. For more information about attaching policies to Amazon S3 buckets, see [Using Bucket Policies and User Policies](https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-iam-policies.html) in the _Amazon Simple Storage Service User Guide_. - -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "AllowSESGet", - "Effect": "Allow", - "Principal": { - "Service": "ses.amazonaws.com" - }, - "Action": "s3:GetObject", - "Resource": "arn:aws:s3:::BUCKET-NAME/OBJECT-NAME", - "Condition": { - "StringEquals": { - "aws:Referer": "AWSACCOUNTID" - } - } - } - ] - } - - @@ -353,4 +323,0 @@ You can view a list of all of the email addresses that are on your account-level -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -458,4 +424,0 @@ If an address is on the suppression list for your account, but you know that the -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -645,4 +607,0 @@ You can view a list of all of the email addresses that are on your account-level -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -719,4 +677,0 @@ You can get information about an import job for the account by using the [GetImp -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). - @@ -779,4 +733,0 @@ You can use the [PutAccountSuppressionAttributes](https://docs.aws.amazon.com/se -###### Note - -The following procedure assumes that you've already installed the AWS CLI. For more information about installing and configuring the AWS CLI, see the [AWS Command Line Interface User Guide](https://docs.aws.amazon.com/cli/latest/userguide/). -