Getting started

Setting up the SES ingress

Configuring the SNS webhook

You need to configure the ARN of you AWS SNS queue by configuring email.inbound.ses.sns.topicArn to the ARN of your queue. Only messages that are signed by AWS and originate from this ARN are accepted.

Configuring S3 access

Due to the message size of raw IMAP the data does not get send via SNS but is pushed into an AWS S3 bucket. To be able to read from the bucket you need to configure a role with S3 read permissions, create an access key in AWS IAM and configure aws.auth with the key aswell as aws.region with the AWS region of your bucket.

Configuring the SNS subscription

Connecting MailFlow Relay with your SNS topic requires providing the target URL to AWS. you can find the URL in the instance config computed values. The HTTP endpoint for SNS is /api/webhooks/recieve. Add the URL as a subscription of type HTTPS. This webhook automatically accepts valid SNS subscription confirmation requests. If you refresh your dashboard an see the subscription marked active you are all set.