All checks
Medium
SES configuration sets should have TLS enabled for sending emails
Flags Amazon SES configuration sets whose delivery options do not require TLS. When TLS is optional, SES falls back to unencrypted SMTP whenever the recipient mail server does not advertise STARTTLS, exposing message contents in transit.
- service
- SES
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Set DeliveryOptions.TlsPolicy to REQUIRE on every SES configuration set.
- Open the Amazon SES console and choose Configuration sets.
- Select the configuration set and choose Edit.
- Under Delivery options, set TLS to Required.
- Save the changes.
See which of your accounts this check is failing on.
Book a demo