AWS ses documentation change

Service: ses · 2026-04-01 · Documentation low

File: ses/latest/dg/eb-rules.md

Summary

Added client certificate attributes as rule conditions for mTLS ingress endpoints and documented Bounce and Invoke Lambda function as new rule actions

Security assessment

This change documents new rule conditions based on client certificate attributes (common name, serial number, etc.) for mTLS ingress endpoints, enabling certificate-based filtering which is a security feature. The bounce action can be used for security filtering by rejecting emails. These are feature additions rather than fixes for security vulnerabilities.

Diff

diff --git a/ses/latest/dg/eb-rules.md b/ses/latest/dg/eb-rules.md
index 573c6d74e..8c12dcb69 100644
--- a//ses/latest/dg/eb-rules.md
+++ b//ses/latest/dg/eb-rules.md
@@ -115 +115,12 @@ Rule conditions: Properties, operators, and values Property | Expression type
-From address To address CC address Mail from Recipient address Subject Helo MIME header Vade Advanced Email Security [(if subscribed)](./eb-addons.html)
+From address To address CC address Mail from Recipient address Subject Helo MIME header Client certificate attribute _(mTLS ingress endpoints only)_
+
+  * Serial number
+  * Common name
+  * Country
+  * Locality
+  * Organization
+  * Organizational unit
+  * State
+  * Subject alternative name
+
+Vade Advanced Email Security [(if subscribed)](./eb-addons.html)
@@ -159,0 +171,2 @@ Rule actions: Actions and parameters Actions & their parameters | Description
+[_Bounce_](https://docs.aws.amazon.com/sesmailmanager/latest/APIReference/API_BounceAction.html) |  Bounces the email by returning a bounce response to the sender.  
+[_Invoke Lambda function_](https://docs.aws.amazon.com/sesmailmanager/latest/APIReference/API_InvokeLambdaAction.html) |  Invokes an AWS Lambda function to process the email. The Lambda payload format is the same as Amazon SES Email Receiving, as described in [Notification contents](./receiving-email-notifications-contents.html). For more information, see [Use case examples](./receiving-email-action-lambda-example-use-cases.html). For code examples, see [Lambda function examples](./receiving-email-action-lambda-example-functions.html).