SES

19 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

SESConfigurationSetEventDestination # CLOUD CONTROL · AWS::SES::ConfigurationSetEventDestination

SESConfigurationSetEventDestination manages AWS::SES::ConfigurationSetEventDestination through the AWS Cloud Control API.

kubectl get sesconfigurationseteventdestinations · example on GitHub

Example

# SESConfigurationSetEventDestination — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesconfigurationseteventdestination
apiVersion: aws.konfig.io/v1alpha1
kind: SESConfigurationSetEventDestination
metadata:
  name: example-sesconfigurationseteventdestination
  namespace: default
spec:
  configurationSetName: example-sesconfigurationseteventdestination
  eventDestination:
    cloudWatchDestination:
      dimensionConfigurations:
      - defaultDimensionValue: example
        dimensionName: example-sesconfigurationseteventdestination
        dimensionValueSource: example
    enabled: true
    eventBridgeDestination:
      eventBusArn: arn:aws:iam::123456789012:role/example-role
    kinesisFirehoseDestination:
      deliveryStreamARN: arn:aws:iam::123456789012:role/example-role
      iamRoleARN: arn:aws:iam::123456789012:role/example-role
    matchingEventTypes:
    - example
    name: example-sesconfigurationseteventdestination
    snsDestination:
      topicARN: arn:aws:iam::123456789012:role/example-role
  providerRef:
    name: example-sesconfigurationseteventdestination
    region: us-east-1

Spec

FieldTypeRequiredDescription
configurationSetNamestringyesThe name of the configuration set that contains the event destination.
eventDestinationobjectyesThe event destination object.
eventDestination.cloudWatchDestinationobject—An object that contains the names, default values, and sources of the dimensions associated with an Amazon CloudWatch event destination.
eventDestination.cloudWatchDestination.dimensionConfigurationsarray<object>—A list of dimensions upon which to categorize your emails when you publish email sending events to Amazon CloudWatch.
eventDestination.cloudWatchDestination.dimensionConfigurations[].defaultDimensionValuestringyesThe default value of the dimension that is published to Amazon CloudWatch if you do not provide the value of the dimension when you send an email.
eventDestination.cloudWatchDestination.dimensionConfigurations[].dimensionNamestringyesThe name of an Amazon CloudWatch dimension associated with an email sending metric.
eventDestination.cloudWatchDestination.dimensionConfigurations[].dimensionValueSourcestringyesThe place where Amazon SES finds the value of a dimension to publish to Amazon CloudWatch.
eventDestination.enabledboolean—Sets whether Amazon SES publishes events to this destination when you send an email with the associated configuration set.
eventDestination.eventBridgeDestinationobject—An object that contains Event bus ARN associated with the event bridge destination.
eventDestination.eventBridgeDestination.eventBusArnstringyes
eventDestination.kinesisFirehoseDestinationobject—An object that contains the delivery stream ARN and the IAM role ARN associated with an Amazon Kinesis Firehose event destination.
eventDestination.kinesisFirehoseDestination.deliveryStreamARNstringyesThe ARN of the Amazon Kinesis Firehose stream that email sending events should be published to.
eventDestination.kinesisFirehoseDestination.iamRoleARNstringyesThe ARN of the IAM role under which Amazon SES publishes email sending events to the Amazon Kinesis Firehose stream.
eventDestination.matchingEventTypesarray<string>yesThe type of email sending events, send, reject, bounce, complaint, delivery, open, click, renderingFailure, deliveryDelay, and subscription.
eventDestination.namestring—The name of the event destination set.
eventDestination.snsDestinationobject—An object that contains SNS topic ARN associated event destination.
eventDestination.snsDestination.topicARNstringyes
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESContactList # CLOUD CONTROL · AWS::SES::ContactList

SESContactList manages AWS::SES::ContactList through the AWS Cloud Control API.

kubectl get sescontactlists · example on GitHub

Example

# SESContactList — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sescontactlist
apiVersion: aws.konfig.io/v1alpha1
kind: SESContactList
metadata:
  name: example-sescontactlist
  namespace: default
spec:
  contactListName: example-sescontactlist
  description: Managed by konfig-konector
  providerRef:
    name: example-sescontactlist
    region: us-east-1
  tags:
  - key: example
    value: example
  topics:
  - defaultSubscriptionStatus: example
    description: Managed by konfig-konector
    displayName: example-sescontactlist
    topicName: example-sescontactlist

Spec

FieldTypeRequiredDescription
contactListNamestring—The name of the contact list.
descriptionstring—The description of the contact list.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—The tags (keys and values) associated with the contact list.
tags[].keystringyes
tags[].valuestringyes
topicsarray<object>—The topics associated with the contact list.
topics[].defaultSubscriptionStatusstringyes
topics[].descriptionstring—The description of the topic.
topics[].displayNamestringyesThe display name of the topic.
topics[].topicNamestringyesThe name of the topic.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESCustomVerificationEmailTemplate # CLOUD CONTROL · AWS::SES::CustomVerificationEmailTemplate

SESCustomVerificationEmailTemplate manages AWS::SES::CustomVerificationEmailTemplate through the AWS Cloud Control API.

kubectl get sescustomverificationemailtemplates · example on GitHub

Example

# SESCustomVerificationEmailTemplate — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sescustomverificationemailtemplate
apiVersion: aws.konfig.io/v1alpha1
kind: SESCustomVerificationEmailTemplate
metadata:
  name: example-sescustomverificationemailtemplate
  namespace: default
spec:
  failureRedirectionURL: example
  fromEmailAddress: ops@example.com
  providerRef:
    name: example-sescustomverificationemailtemplate
    region: us-east-1
  successRedirectionURL: example
  tags:
  - key: example
    value: example
  templateContent: example
  templateName: example-sescustomverificationemailtemplate
  templateSubject: example

Spec

FieldTypeRequiredDescription
failureRedirectionURLstringyesThe URL that the recipient of the verification email is sent to if his or her address is not successfully verified.
fromEmailAddressstringyesThe email address that the custom verification email is sent from.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
successRedirectionURLstringyesThe URL that the recipient of the verification email is sent to if his or her address is successfully verified.
tagsarray<object>—The tags (keys and values) associated with the tenant.
tags[].keystringyes
tags[].valuestringyes
templateContentstringyesThe content of the custom verification email.
templateNamestringyesThe name of the custom verification email template.
templateSubjectstringyesThe subject line of the custom verification email.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESDedicatedIpPool # CLOUD CONTROL · AWS::SES::DedicatedIpPool

SESDedicatedIpPool manages AWS::SES::DedicatedIpPool through the AWS Cloud Control API.

kubectl get sesdedicatedippools · example on GitHub

Example

# SESDedicatedIpPool — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesdedicatedippool
apiVersion: aws.konfig.io/v1alpha1
kind: SESDedicatedIpPool
metadata:
  name: example-sesdedicatedippool
  namespace: default
spec:
  poolName: example-sesdedicatedippool
  providerRef:
    name: example-sesdedicatedippool
    region: us-east-1
  scalingMode: example
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
poolNamestring—The name of the dedicated IP pool.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
scalingModestring—Specifies whether the dedicated IP pool is managed or not.
tagsarray<object>—The tags (keys and values) associated with the dedicated IP pool.
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerAddonInstance # CLOUD CONTROL · AWS::SES::MailManagerAddonInstance

SESMailManagerAddonInstance manages AWS::SES::MailManagerAddonInstance through the AWS Cloud Control API.

kubectl get sesmailmanageraddoninstances · example on GitHub

Example

# SESMailManagerAddonInstance — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanageraddoninstance
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerAddonInstance
metadata:
  name: example-sesmailmanageraddoninstance
  namespace: default
spec:
  addonSubscriptionId: example-id
  providerRef:
    name: example-sesmailmanageraddoninstance
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
addonSubscriptionIdstringyesCreate-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
addonInstanceArnstring—Read-only: reported by AWS after creation.
addonInstanceIdstring—Read-only: reported by AWS after creation.
addonNamestring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerAddonSubscription # CLOUD CONTROL · AWS::SES::MailManagerAddonSubscription

SESMailManagerAddonSubscription manages AWS::SES::MailManagerAddonSubscription through the AWS Cloud Control API.

kubectl get sesmailmanageraddonsubscriptions · example on GitHub

Example

# SESMailManagerAddonSubscription — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanageraddonsubscription
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerAddonSubscription
metadata:
  name: example-sesmailmanageraddonsubscription
  namespace: default
spec:
  addonName: example-sesmailmanageraddonsubscription
  providerRef:
    name: example-sesmailmanageraddonsubscription
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
addonNamestringyesCreate-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
addonSubscriptionArnstring—Read-only: reported by AWS after creation.
addonSubscriptionIdstring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerAddressList # CLOUD CONTROL · AWS::SES::MailManagerAddressList

SESMailManagerAddressList manages AWS::SES::MailManagerAddressList through the AWS Cloud Control API.

kubectl get sesmailmanageraddresslists · example on GitHub

Example

# SESMailManagerAddressList — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanageraddresslist
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerAddressList
metadata:
  name: example-sesmailmanageraddresslist
  namespace: default
spec:
  addressListName: example-sesmailmanageraddresslist
  providerRef:
    name: example-sesmailmanageraddresslist
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
addressListNamestring—Create-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
addressListArnstring—Read-only: reported by AWS after creation.
addressListIdstring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerArchive # CLOUD CONTROL · AWS::SES::MailManagerArchive

SESMailManagerArchive manages AWS::SES::MailManagerArchive through the AWS Cloud Control API.

kubectl get sesmailmanagerarchives · example on GitHub

Example

# SESMailManagerArchive — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanagerarchive
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerArchive
metadata:
  name: example-sesmailmanagerarchive
  namespace: default
spec:
  archiveName: example-sesmailmanagerarchive
  kmsKeyArn: arn:aws:iam::123456789012:role/example-role
  providerRef:
    name: example-sesmailmanagerarchive
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
archiveNamestring—
kmsKeyArnstring—Create-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
retentionobject—
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
archiveArnstring—Read-only: reported by AWS after creation.
archiveIdstring—Read-only: reported by AWS after creation.
archiveStateenum—Read-only: reported by AWS after creation. Allowed: ACTIVE, PENDING_DELETION
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerIngressPoint # CLOUD CONTROL · AWS::SES::MailManagerIngressPoint

SESMailManagerIngressPoint manages AWS::SES::MailManagerIngressPoint through the AWS Cloud Control API.

kubectl get sesmailmanageringresspoints · example on GitHub

Example

# SESMailManagerIngressPoint — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanageringresspoint
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerIngressPoint
metadata:
  name: example-sesmailmanageringresspoint
  namespace: default
spec:
  ingressPointName: example-sesmailmanageringresspoint
  providerRef:
    name: example-sesmailmanageringresspoint
    region: us-east-1
  ruleSetId: example-id
  statusToUpdate: ACTIVE
  tags:
  - key: example
    value: example
  tlsPolicy: REQUIRED
  trafficPolicyId: example-id
  type: OPEN

Spec

FieldTypeRequiredDescription
ingressPointConfigurationobject—
ingressPointNamestring—
networkConfigurationobject—Create-only in AWS: changing it requires replacing the resource.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
ruleSetIdstringyes
statusToUpdateenum—Allowed: ACTIVE, CLOSED
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes
tlsPolicyenum—Allowed: REQUIRED, OPTIONAL, FIPS
trafficPolicyIdstringyes
typeenumyesCreate-only in AWS: changing it requires replacing the resource. Allowed: OPEN, AUTH, MTLS

Status

FieldTypeRequiredDescription
aRecordstring—Read-only: reported by AWS after creation.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
ingressPointArnstring—Read-only: reported by AWS after creation.
ingressPointIdstring—Read-only: reported by AWS after creation.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.
statusenum—Read-only: reported by AWS after creation. Allowed: PROVISIONING, DEPROVISIONING, UPDATING, ACTIVE, CLOSED, FAILED

SESMailManagerRelay # CLOUD CONTROL · AWS::SES::MailManagerRelay

SESMailManagerRelay manages AWS::SES::MailManagerRelay through the AWS Cloud Control API.

kubectl get sesmailmanagerrelays · example on GitHub

Example

# SESMailManagerRelay — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanagerrelay
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerRelay
metadata:
  name: example-sesmailmanagerrelay
  namespace: default
spec:
  providerRef:
    name: example-sesmailmanagerrelay
    region: us-east-1
  relayName: example-sesmailmanagerrelay
  serverName: example-sesmailmanagerrelay
  serverPort: 443
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
authenticationobjectyes
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
relayNamestring—
serverNamestringyes
serverPortnumberyes
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
relayArnstring—Read-only: reported by AWS after creation.
relayIdstring—Read-only: reported by AWS after creation.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESMailManagerRuleSet # CLOUD CONTROL · AWS::SES::MailManagerRuleSet

SESMailManagerRuleSet manages AWS::SES::MailManagerRuleSet through the AWS Cloud Control API.

kubectl get sesmailmanagerrulesets · example on GitHub

Example

# SESMailManagerRuleSet — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanagerruleset
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerRuleSet
metadata:
  name: example-sesmailmanagerruleset
  namespace: default
spec:
  providerRef:
    name: example-sesmailmanagerruleset
    region: us-east-1
  ruleSetName: example-sesmailmanagerruleset
  rules:
  - name: example-sesmailmanagerruleset
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
ruleSetNamestring—
rulesarray<object>yes
rules[].actionsarray<object>yes
rules[].conditionsarray<object>—
rules[].namestring—
rules[].unlessarray<object>—
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.
ruleSetArnstring—Read-only: reported by AWS after creation.
ruleSetIdstring—Read-only: reported by AWS after creation.

SESMailManagerTrafficPolicy # CLOUD CONTROL · AWS::SES::MailManagerTrafficPolicy

SESMailManagerTrafficPolicy manages AWS::SES::MailManagerTrafficPolicy through the AWS Cloud Control API.

kubectl get sesmailmanagertrafficpolicies · example on GitHub

Example

# SESMailManagerTrafficPolicy — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmailmanagertrafficpolicy
apiVersion: aws.konfig.io/v1alpha1
kind: SESMailManagerTrafficPolicy
metadata:
  name: example-sesmailmanagertrafficpolicy
  namespace: default
spec:
  defaultAction: ALLOW
  maxMessageSizeBytes: 2
  policyStatements:
  - action: ALLOW
  providerRef:
    name: example-sesmailmanagertrafficpolicy
    region: us-east-1
  tags:
  - key: example
    value: example
  trafficPolicyName: example-sesmailmanagertrafficpolicy

Spec

FieldTypeRequiredDescription
defaultActionenumyesAllowed: ALLOW, DENY
maxMessageSizeBytesnumber—
policyStatementsarray<object>yes
policyStatements[].actionenumyesAllowed: ALLOW, DENY
policyStatements[].conditionsarray<object>yes
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes
trafficPolicyNamestring—

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.
trafficPolicyArnstring—Read-only: reported by AWS after creation.
trafficPolicyIdstring—Read-only: reported by AWS after creation.

SESMultiRegionEndpoint # CLOUD CONTROL · AWS::SES::MultiRegionEndpoint

SESMultiRegionEndpoint manages AWS::SES::MultiRegionEndpoint through the AWS Cloud Control API.

kubectl get sesmultiregionendpoints · example on GitHub

Example

# SESMultiRegionEndpoint — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesmultiregionendpoint
apiVersion: aws.konfig.io/v1alpha1
kind: SESMultiRegionEndpoint
metadata:
  name: example-sesmultiregionendpoint
  namespace: default
spec:
  details:
    routeDetails:
    - region: us-east-1
  endpointName: example-sesmultiregionendpoint
  providerRef:
    name: example-sesmultiregionendpoint
    region: us-east-1
  tags:
  - key: example
    value: example

Spec

FieldTypeRequiredDescription
detailsobjectyesCreate-only in AWS: changing it requires replacing the resource.
details.routeDetailsarray<object>yes
details.routeDetails[].regionstringyes
endpointNamestringyesThe name of the multi-region endpoint (global-endpoint).
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—
tags[].keystringyes
tags[].valuestringyes

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESReceiptFilter # CLOUD CONTROL · AWS::SES::ReceiptFilter

SESReceiptFilter manages AWS::SES::ReceiptFilter through the AWS Cloud Control API.

kubectl get sesreceiptfilters · example on GitHub

Example

# SESReceiptFilter — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesreceiptfilter
apiVersion: aws.konfig.io/v1alpha1
kind: SESReceiptFilter
metadata:
  name: example-sesreceiptfilter
  namespace: default
spec:
  filter:
    ipFilter:
      cidr: 10.0.0.0/16
      policy: '{"Version": "2012-10-17", "Statement": [{"Effect": "Allow", "Action": ["s3:GetObject"],
        "Resource": "*"}]}'
    name: example-sesreceiptfilter
  providerRef:
    name: example-sesreceiptfilter
    region: us-east-1

Spec

FieldTypeRequiredDescription
filterobjectyesCreate-only in AWS: changing it requires replacing the resource.
filter.ipFilterobjectyesSESReceiptFilterIpFilter is a nested property type of AWS::SES::ReceiptFilter.
filter.ipFilter.cidrstringyesA single IP address or a range of IP addresses to block or allow, specified in CIDR notation.
filter.ipFilter.policystringyesIndicates whether to block or allow incoming mail from the specified IP addresses.
filter.namestring—The name of the IP address filter.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESReceiptRule # CLOUD CONTROL · AWS::SES::ReceiptRule

SESReceiptRule manages AWS::SES::ReceiptRule through the AWS Cloud Control API.

kubectl get sesreceiptrules · example on GitHub

Example

# SESReceiptRule — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesreceiptrule
apiVersion: aws.konfig.io/v1alpha1
kind: SESReceiptRule
metadata:
  name: example-sesreceiptrule
  namespace: default
spec:
  after: example
  providerRef:
    name: example-sesreceiptrule
    region: us-east-1
  rule:
    enabled: true
    name: example-sesreceiptrule
    recipients:
    - example
    scanEnabled: true
    tlsPolicy: example
  ruleSetName: example-sesreceiptrule

Spec

FieldTypeRequiredDescription
afterstring—The name of an existing rule after which the new rule is placed.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
ruleobjectyesA data structure that contains the specified rule's name, actions, recipients, domains, enabled status, scan status, and TLS policy.
rule.actionsarray<object>—An ordered list of actions to perform on messages that match at least one of the recipient email addresses or domains specified in the receipt rule.
rule.actions[].addHeaderActionobject—SESReceiptRuleAddHeaderAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].addHeaderAction.headerNamestringyesThe name of the header to add to the incoming message.
rule.actions[].addHeaderAction.headerValuestringyesThe content to include in the header.
rule.actions[].bounceActionobject—SESReceiptRuleBounceAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].bounceAction.messagestringyesHuman-readable text to include in the bounce message.
rule.actions[].bounceAction.senderstringyesThe email address of the sender of the bounced email.
rule.actions[].bounceAction.smtpReplyCodestringyesThe SMTP reply code, as defined by RFC 5321.
rule.actions[].bounceAction.statusCodestring—The SMTP enhanced status code, as defined by RFC 3463.
rule.actions[].bounceAction.topicArnstring—The Amazon Resource Name (ARN) of the Amazon SNS topic to notify when the bounce action is taken.
rule.actions[].connectActionobject—SESReceiptRuleConnectAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].connectAction.iamRoleARNstringyesThe Amazon Resource Name (ARN) of the IAM role to be used by Amazon Simple Email Service while starting email contacts to the Amazon Connect instance.
rule.actions[].connectAction.instanceARNstringyesThe Amazon Resource Name (ARN) for the Amazon Connect instance that Amazon SES integrates with for starting email contacts.
rule.actions[].lambdaActionobject—SESReceiptRuleLambdaAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].lambdaAction.functionArnstringyesThe Amazon Resource Name (ARN) of the AWS Lambda function.
rule.actions[].lambdaAction.invocationTypestring—The invocation type of the AWS Lambda function.
rule.actions[].lambdaAction.topicArnstring—The Amazon Resource Name (ARN) of the Amazon SNS topic to notify when the Lambda action is executed.
rule.actions[].s3Actionobject—SESReceiptRuleS3Action is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].s3Action.bucketNamestringyesThe name of the Amazon S3 bucket for incoming email.
rule.actions[].s3Action.iamRoleArnstring—The ARN of the IAM role to be used by Amazon SES while writing to the Amazon S3 bucket.
rule.actions[].s3Action.kmsKeyArnstring—The customer managed key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket.
rule.actions[].s3Action.objectKeyPrefixstring—The key prefix of the Amazon S3 bucket.
rule.actions[].s3Action.topicArnstring—The ARN of the Amazon SNS topic to notify when the message is saved to the Amazon S3 bucket.
rule.actions[].snsActionobject—SESReceiptRuleSNSAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].snsAction.encodingstring—The encoding to use for the email within the Amazon SNS notification.
rule.actions[].snsAction.topicArnstring—The Amazon Resource Name (ARN) of the Amazon SNS Topic to which notification for the email received will be published.
rule.actions[].stopActionobject—SESReceiptRuleStopAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].stopAction.scopestringyesThe scope of the StopAction.
rule.actions[].stopAction.topicArnstring—The Amazon Resource Name (ARN) of the Amazon SNS topic to notify when the stop action is taken.
rule.actions[].workmailActionobject—SESReceiptRuleWorkmailAction is a nested property type of AWS::SES::ReceiptRule.
rule.actions[].workmailAction.organizationArnstringyesThe Amazon Resource Name (ARN) of the Amazon WorkMail organization.
rule.actions[].workmailAction.topicArnstring—The Amazon Resource Name (ARN) of the Amazon SNS topic to notify when the WorkMail action is called.
rule.enabledboolean—If true, the receipt rule is active.
rule.namestring—The name of the receipt rule.
rule.recipientsarray<string>—The recipient domains and email addresses that the receipt rule applies to.
rule.scanEnabledboolean—If true, then messages that this receipt rule applies to are scanned for spam and viruses.
rule.tlsPolicystring—Specifies whether Amazon SES should require that incoming email is delivered over a connection encrypted with Transport Layer Security (TLS).
ruleSetNamestringyesThe name of the rule set where the receipt rule is added.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.
ruleNamestring—The name of the rule Read-only: reported by AWS after creation.

SESReceiptRuleSet # CLOUD CONTROL · AWS::SES::ReceiptRuleSet

SESReceiptRuleSet manages AWS::SES::ReceiptRuleSet through the AWS Cloud Control API.

kubectl get sesreceiptrulesets · example on GitHub

Example

# SESReceiptRuleSet — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesreceiptruleset
apiVersion: aws.konfig.io/v1alpha1
kind: SESReceiptRuleSet
metadata:
  name: example-sesreceiptruleset
  namespace: default
spec:
  providerRef:
    name: example-sesreceiptruleset
    region: us-east-1
  ruleSetName: example-sesreceiptruleset

Spec

FieldTypeRequiredDescription
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
ruleSetNamestring—The name of the rule set.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESTemplate # CLOUD CONTROL · AWS::SES::Template

SESTemplate manages AWS::SES::Template through the AWS Cloud Control API.

kubectl get sestemplates · example on GitHub

Example

# SESTemplate — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sestemplate
apiVersion: aws.konfig.io/v1alpha1
kind: SESTemplate
metadata:
  name: example-sestemplate
  namespace: default
spec:
  providerRef:
    name: example-sestemplate
    region: us-east-1
  tags:
  - key: example
    value: example
  template:
    htmlPart: example
    subjectPart: example
    templateName: example-sestemplate
    textPart: example

Spec

FieldTypeRequiredDescription
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
tagsarray<object>—The tags (keys and values) associated with the email template.
tags[].keystringyes
tags[].valuestringyes
templateobject—SESTemplateTemplate is a nested property type of AWS::SES::Template.
template.htmlPartstring—The HTML body of the email.
template.subjectPartstringyesThe subject line of the email.
template.templateNamestring—The name of the template.
template.textPartstring—The email body that is visible to recipients whose email clients do not display HTML content.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
idstring—Read-only: reported by AWS after creation.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESTenant # CLOUD CONTROL · AWS::SES::Tenant

SESTenant manages AWS::SES::Tenant through the AWS Cloud Control API.

kubectl get sestenants · example on GitHub

Example

# SESTenant — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sestenant
apiVersion: aws.konfig.io/v1alpha1
kind: SESTenant
metadata:
  name: example-sestenant
  namespace: default
spec:
  providerRef:
    name: example-sestenant
    region: us-east-1
  resourceAssociations:
  - resourceArn: arn:aws:iam::123456789012:role/example-role
  tags:
  - key: example
    value: example
  tenantName: example-sestenant

Spec

FieldTypeRequiredDescription
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.
resourceAssociationsarray<object>—The list of resources to associate with the tenant.
resourceAssociations[].resourceArnstringyesThe ARN of the resource to associate with the tenant
tagsarray<object>—The tags (keys and values) associated with the tenant.
tags[].keystringyes
tags[].valuestringyes
tenantNamestringyesThe name of the tenant.

Status

FieldTypeRequiredDescription
arnstring—Amazon Resource Name (ARN) of the tenant.
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.

SESVdmAttributes # CLOUD CONTROL · AWS::SES::VdmAttributes

SESVdmAttributes manages AWS::SES::VdmAttributes through the AWS Cloud Control API.

kubectl get sesvdmattributes · example on GitHub

Example

# SESVdmAttributes — SES
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/ses.html#sesvdmattributes
apiVersion: aws.konfig.io/v1alpha1
kind: SESVdmAttributes
metadata:
  name: example-sesvdmattributes
  namespace: default
spec:
  dashboardAttributes:
    engagementMetrics: example
  guardianAttributes:
    optimizedSharedDelivery: example
  providerRef:
    name: example-sesvdmattributes
    region: us-east-1

Spec

FieldTypeRequiredDescription
dashboardAttributesobject—SESVdmAttributesDashboardAttributes is a nested property type of AWS::SES::VdmAttributes.
dashboardAttributes.engagementMetricsstring—Whether emails sent from this account have engagement tracking enabled.
guardianAttributesobject—SESVdmAttributesGuardianAttributes is a nested property type of AWS::SES::VdmAttributes.
guardianAttributes.optimizedSharedDeliverystring—Whether emails sent from this account have optimized delivery algorithm enabled.
providerRefobject—ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
providerRef.namestringyesName of a cluster-scoped AWSProvider.
providerRef.regionstring—Region overrides the provider's region for this resource only.

Status

FieldTypeRequiredDescription
attemptinteger—Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
awsProviderobject—AWSProvider confirms the account and region this resource was reconciled against.
awsProvider.accountIdstring—AccountID the resource lives in.
awsProvider.namestring—Name of the AWSProvider used; empty when the operator's own credentials were used.
awsProvider.regionstring—Region the resource lives in (empty for global services).
conditionsarray<object>—Conditions describe the current state of the resource.
conditions[].lastTransitionTimestringyeslastTransitionTime is the last time the condition transitioned from one status to another.
conditions[].messagestringyesmessage is a human readable message indicating details about the transition.
conditions[].observedGenerationinteger—observedGeneration represents the .metadata.generation that the condition was set based upon.
conditions[].reasonstringyesreason contains a programmatic identifier indicating the reason for the condition's last transition.
conditions[].statusenumyesstatus of the condition, one of True, False, Unknown. Allowed: True, False, Unknown
conditions[].typestringyestype of condition in CamelCase or in foo.example.com/CamelCase.
identifierstring—Identifier is the Cloud Control primary identifier of the resource.
lastSyncTimestring—
observedGenerationinteger—
operationstring—Operation is the in-flight operation (CREATE, UPDATE, DELETE).
operationStatusstring—OperationStatus is the last reported operation status.
requestTokenstring—RequestToken tracks an in-flight asynchronous operation.
vdmAttributesResourceIdstring—Unique identifier for this resource Read-only: reported by AWS after creation.