Require TLS for sending form submission via SES

This means that all form submission sent by email will require the to use TLS to send the email from SES to the recipent mailbox. This prevent the connection to be downgraded and the submission to sent over plaintext.

Author: theseanything

infra/modules/ses/main.tf

@@ -55,6 +55,10 @@ resource "aws_sesv2_configuration_set" "form_submissions" {
     reputation_metrics_enabled = true
   }
 
+  delivery_options {
+    tls_policy = "REQUIRE"
+  }
+
   suppression_options {
     suppressed_reasons = [] # We don't want to use the suppression list for form submission emails
   }