Using SES in Glue Job and VPC

Hi,

I have a glue job and used SES to send email from glue job, and my python client = boto3.client('ses', region_name=<AWS region>)

VPC Endpoint Service Name : com.amazonaws.<AWS region>1.email-smtp

Getting Connect timeout on endpoint URL: "https://email.<AWS region>.amazonaws.com/"for ses.

<AWS region> is my region

Could you please help me to resolve the issue

주제

태그

언어

English

질문됨 한 달 전171회 조회

1개 답변

Hello.

Is your Glue Job connected to the same VPC as your VPC endpoint?
https://docs.aws.amazon.com/glue/latest/dg/start-connecting.html

Also, does the VPC endpoint's security group allow SMTPS connections from the security group used by Glue Job?
Specifically, the following inbound rules must be set in the security group of the VPC endpoint.
https://docs.aws.amazon.com/ses/latest/dg/send-email-set-up-vpc-endpoints.html
https://docs.aws.amazon.com/vpc/latest/privatelink/create-interface-endpoint.html#prerequisites-interface-endpoints

Type	Protocol	Port	Source
SMTPSSMTPS	TCP	465	Glue Job Security Group

전문가

답변함 한 달 전

전문가

검토됨 한 달 전

Bharath
한 달 전
Thank you so much for the input. We already have the inbound rule with below details. Do we still need to add new rule with specific values - Type as HTTPS, Protocol as TCP and etc ? Type All traffic Protocol All Port range All
Riku_Kobayashi 전문가
한 달 전
I see, there seems to be no problem with the security group settings. So, is Glue Job tied to VPC?
Riku_Kobayashi 전문가
한 달 전
By the way, how do you send emails in the Glue Job code? Amazon SES's VPC endpoint can send mail using the SMTP endpoint, but it cannot send mail using the Amazon SES API (SDK, etc.). https://docs.aws.amazon.com/ses/latest/dg/send-email-set-up-vpc-endpoints.html
If you are sending email using AWS SDK, you need to set up a NAT Gateway instead of a VPC endpoint.
Bharath
한 달 전
Hi Riku_Kobayashi,

I use boto3 to send email from Glue job - https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/ses/client/send_email.html
Riku_Kobayashi 전문가
한 달 전
As of July 2024, you cannot use boto3 to send emails using Amazon SES's VPC endpoint. The currently provided VPC endpoints are for SMTP endpoints. If you are using boto3 please set up a NAT Gateway.

관련 콘텐츠