TrafficPolicy

Source: src/AWS/MailManager/TrafficPolicy.ts

An SES Mail Manager traffic policy — connection-level ALLOW/DENY rules an ingress point applies before email reaches the rule set (sender CIDRs, recipient patterns, TLS floor, message size cap).

All aspects (name, statements, default action, size cap, tags) update in place.

Creating Traffic Policies

Deny-by-Default with an Allowed CIDR

import * as MailManager from "alchemy/AWS/MailManager";

const policy = yield* MailManager.TrafficPolicy("Edge", {
  defaultAction: "DENY",
  policyStatements: [
    {
      Action: "ALLOW",
      Conditions: [
        {
          IpExpression: {
            Evaluate: { Attribute: "SENDER_IP" },
            Operator: "CIDR_MATCHES",
            Values: ["10.0.0.0/8"],
          },
        },
      ],
    },
  ],
});

Allow All with a Size Cap

const policy = yield* MailManager.TrafficPolicy("Edge", {
  defaultAction: "ALLOW",
  maxMessageSizeBytes: 10 * 1024 * 1024,
});