Unable to add Amazon SES as SMTP relay

[hakunamatata]

I have been using Amazon SES as an SMTP relay on my main domain (Domain A) for almost two years, without any issues.

I recently purchased a new domain (Domain B) and added it to Cloudron. In trying to set up the cloudron mail server to also use Amazon SES for outbound emails, I keep on receiving the error message: "Invalid login: 535 Authentication Credentials Invalid."

DKIM Set up for Domain B on Amazon SES has been completed.

On the Amazon SES access management side of things, it is the same user for Domains A & B but with 2 different access keys. (Access key 1 for Domain A , Access key 2 for Domain B)

I thought about copying the SMTP credentials in Cloudron from Domain A to Domain B to see if that would work, but the unmask password button doesn't seem to be working.

Any suggestions on how best to troubleshoot? Thanks

[nebulon]

AWS credentials via IAM roles are always a bit of a struggle. Have you seen the policy description at https://docs.cloudron.io/email/#amazon-ses ?

Password reveal indead is probably wrong here, since we do not actually send back the password/secrets to the frontend on edit, but have placeholder values instead to not leak credentials via the REST api.

[hakunamatata]

I created a new SMTP user and that worked like a charm. Not sure why adding an access key for the existing cloudron SMTP user doesn't work.
Either way, important thing is that it is working now.
You may mark this thread as resolved. Thanks!