SES Template Uploader for GitHub Actions

Creates or updates SES templates within the repository.

• Usage
• Credentials and Region
• Permissions
• License Summary

Usage

    - name: Create or update Amazon SES templates
        uses: managemy-lease/[email protected]
        with:
          templates: 'assets/email_templates'

Credentials and Region

This action relies on the default behavior of the AWS SDK for Javascript to determine AWS credentials and region. Use the aws-actions/configure-aws-credentials action to configure the GitHub Actions environment with environment variables containing AWS credentials and your desired region.

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
        aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
        aws-region: us-east-2

    - name: Create or update Amazon SES templates
        uses: managemy-lease/action-ses-template-uploader@v1
        with:
          templates: 'assets/email_templates'

Amazon/AWS recommend following Amazon IAM best practices for the AWS credentials used in GitHub Actions workflows, including:

• Do not store credentials in your repository's code. You may use GitHub Actions secrets to store credentials and redact credentials from GitHub Actions workflow logs.
• Create an individual IAM user with an access key for use in GitHub Actions workflows, preferably one per repository. Do not use the AWS account root user access key.
• Grant least privilege to the credentials used in GitHub Actions workflows. Grant only the permissions required to perform the actions in your GitHub Actions workflows. See the Permissions section below for the permissions required by this action.
• Rotate the credentials used in GitHub Actions workflows regularly.
• Monitor the activity of the credentials used in GitHub Actions workflows.

Permissions

This action requires the following minimum set of permissions:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AllowGetAndCreate",
            "Effect": "Allow",
            "Action": [
                "ses:UpdateTemplate",
                "ses:CreateTemplate",
                "ses:GetTemplate"
            ],
            "Resource": "*"
        }
    ]
}

License Summary

This code is made available under the MIT license.