AWS SES (Simple Email Service)

interface SesConfig {
  accessKeyId:     string;  // AWS IAM access key — must have ses:SendRawEmail permission
  secretAccessKey: string;  // AWS IAM secret key
  region:          string;  // AWS region where SES is set up, e.g. "ap-south-1", "us-east-1"
  fromAddress:     string;  // Must be verified in the tenant's SES account
  fromName:        string;  // Display name shown in email client
}

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["ses:SendRawEmail"],
      "Resource": "*"
    }
  ]
}

import { SESClient, SendRawEmailCommand } from '@aws-sdk/client-ses';
import * as nodemailer from 'nodemailer';
 
class SesProvider implements EmailProvider {
  readonly name = 'ses';
  private client: SESClient;
  private transporter: nodemailer.Transporter;
 
  constructor(private cfg: SesConfig) {
    this.client = new SESClient({
      region: cfg.region,
      credentials: {
        accessKeyId:     cfg.accessKeyId,
        secretAccessKey: cfg.secretAccessKey,
      },
    });
 
    // Use nodemailer with SES transport for MIME construction
    this.transporter = nodemailer.createTransport({
      SES: { ses: this.client, aws: { SendRawEmailCommand } },
    });
  }
 
  async send(message: EmailMessage): Promise<EmailSendResult> {
    const info = await this.transporter.sendMail({
      to:      message.to.map(r => `"${r.name}" <${r.email}>`).join(', '),
      from:    `"${this.cfg.fromName}" <${this.cfg.fromAddress}>`,
      replyTo: message.replyTo
                 ? `"${message.replyTo.name}" <${message.replyTo.email}>`
                 : undefined,
      subject: message.subject,
      html:    message.html,
      text:    message.text,
      attachments: message.attachments?.map(a => ({
        filename:    a.filename,
        content:     a.content,
        contentType: a.contentType,
      })),
    });
    return {
      messageId: info.messageId,
      provider:  'ses',
    };
  }
 
  async verify(): Promise<void> {
    // SES doesn't have a "ping" endpoint — send a real test email to the from-address
    await this.transporter.sendMail({
      to:      this.cfg.fromAddress,
      from:    `"${this.cfg.fromName}" <${this.cfg.fromAddress}>`,
      subject: 'Leadmetrics — SES connection test',
      text:    'This is a test email from Leadmetrics to verify your AWS SES configuration.',
    });
  }
}