We received an email recently from AWS:
Subject: [Action Required] Important notification regarding Simple Email Service (SIGv2 Deprecation)
Body:
We recently observed Signature Version 2 requests on an Amazon SES SMTP endpoint originating from your account. xxxxxxxxxxxxxx etc
Problem:
- We are not using AWS SES API to send requests, we just use the SmtpClient to send emails. This method does not provide for signing requests.
Their own example does not include any signing.
https://docs.aws.amazon.com/ses/latest/DeveloperGuide/send-using-smtp-net.html
- In the SES dashboard there is no option for changing the version
- For the current version 2, we have never added any Signature.
Question:
So what exactly do I need to upgrade ?
AWS Finally send me a new email with instructions:
To migrate to Signature Version 4, please replace your existing SMTP credentials using the appropriate procedure relative to your setup:
- If you generated your SMTP credentials using the SES Console, simply create new credentials and replace your existing credentials with the new ones.
- If you derived your SMTP credentials from your AWS credentials, make sure you are using the Signature Version 4 algorithm. If you rely on a library to do this conversion, check if the library has a newer release that uses Signature Version 4 algorithm and migrate to it. Otherwise, you will need to either derive the credentials from another library that uses Signature Version 4 algorithm or generate credentials using the SES console.