Open
Description
AWS Simple Email Service (SES) can be used without SMTP credentials when using an IAM role with AWS.
The AWS SDK for PHP allows sending emails and can use temporary IAM credentials as part of authentication.
When deployed on an EC2 instance or as an ECS task, an IAM role can be assigned to the application so that emails can be sent without SMTP credentials.
It would be very convenient for AWS deployments of self-service-password if we could specify that we're running in AWS and then be able to use SES for mail sending without credentials. This would remove the need to securely store and rotate credentials.