Amazon SES 535身份验证凭证尝试旋转访问密钥无效 [英] Amazon SES 535 Authentication Credentials Invalid trying to rotate access key

问题描述

我们有一个Amazon SES设置，该设置运行良好，每天可通过SMTP发送数千封电子邮件.尝试遵循旋转"访问密钥的最佳做法 https://console.aws.amazon.com/iam/home 并创建一个新与用于发送电子邮件的用户完全相同的访问密钥.新密钥应该是活动的，但是当尝试使用访问密钥通过电子邮件发送邮件时，我们会不断收到

We have an Amazon SES setup that works well and sends thousands of emails a day via SMTP. Trying to follow a best practice of "rotating" access keys we went to https://console.aws.amazon.com/iam/home and creating a new access key for the exact same user which is used to send emails. The new key is supposedly active but when trying to email with the access keys, we keep getting

535 Authentication Credentials Invalid

切换到旧的访问键效果很好，并且电子邮件已发送.尝试了几次以删除新的访问密钥并创建其他访问密钥.相同的机器，相同的软件.我们具有适当的复制+粘贴技能，以确保我们使用的Amazon CSV中提供的ID/密码相同.这里是来自亚马逊的对话框:

Switching to the old access keys works well and emails are sent. Tried a couple of times to delete the new access keys and create others. Same machine, same software. We have proper copy+paste skills to ensure we're using the same ID/Password provided in the CSV coming from Amazon. Here the dialog from Amazon:

那是怎么回事?新密钥激活之前有时间限制吗?还有其他隐藏的限制吗?

So what's going on? Is there a time limit till the new key becomes active? Is there some other hidden limitation somewhere?

推荐答案

您正在将SMTP凭据与access_key和secret混淆.他们是不同的.

You are confusing the SMTP credentials with access_key and secret. They are different.

• access_key/secret ->在SDK和CLI中使用

• SMTP凭据->用于配置SES SMTP

• access_key/secret --> Use in SDK and CLI

• SMTP credentials --> Use to configure SES SMTP

您正在创建一个新的access_key/secret，并将其用作SMTP凭据

You are creating a new access_key/secret and using it as SMTP credentials

即使您生成另一组access_key/secret，您使用的SMTP凭据也可能不会更改.在您的情况下，您似乎正在使用SMTP服务器而不是SDK.因此，生成一组新的access_key/secret对SMTP凭据没有影响.

It is likely you are using the SMTP credentials that does not change even if you generate another set of access_key/secret. In your case it looks like you are using the SMTP server and not the SDK. So generating a new set of access_key/secret has no effect on SMTP credentials.

如果要创建一组新的SMTP凭证，请转到AWS SES仪表板并创建SMTP凭证.

If you want to create a new set of SMTP credentials, go to AWS SES dashboard and create SMTP credentials.

有关更多信息:获取Amazon SES SMTP凭据

这篇关于Amazon SES 535身份验证凭证尝试旋转访问密钥无效的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！