Overview

This guide describes how to configure the Clouden Odoo AWS SES Gateway to receive email from AWS SES to Odoo. The gateway is used only for receiving email. If you also want to send email through AWS SES, you can separately configure an Outgoing Mail Server according to Odoo instructions.

Note that Clouden Odoo AWS SES Gateway uses a scheduled cron job to automatically poll AWS S3 for new email messages every 5 minutes. You can also click "Fetch Now" in the AWS SES Configuration view to immediately fetch new messages.

If you already know how to configure AWS SES Email Receipt Rules and how to configure AWS credentials, you don't have to follow this guide exactly. Make sure to complete these requirements:

• AWS SES is receiving emails into an S3 bucket.
• Odoo has either role based access (e.g. EC2 Instance Role) you've created IAM User credentials.
• The IAM role or IAM user has access to the S3 bucket (see example policy below)
• Clouden Odoo AWS SES Gateway add-on is installed on the Odoo server.
• You've created an AWS SES Gateway Configuration in Odoo settings.

The rest of this document guides you in more detail how to configure these requirements.

Step 1: Open the AWS console

1. Sign in to AWS Console or create a new AWS account if you don't already have one.
2. Navigate to the AWS Console in your web browser: https://console.aws.amazon.com.
3. Make sure you've selected your preferred Region (e.g. Ireland / eu-west-1) in the console.

Step 2: Configure AWS SES

1. Navigate to AWS SES in AWS Console by typing "ses" in the search and selecting Amazon Simple Email Service.
2. Ensure you have a verified identity (domain or email address). See Amazon SES for more instructions.

Step 3: Configure AWS SES Receipt Rule

1. Select "Configuration / Email receiving" in the left Amazon SES menu.
2. Select an existing rule set (e.g. default-rule-set) or create a new rule set.
3. Under "All receipt rules", create a new rule.
4. Enter a unique rule name and leve other settings at their defaults.
5. Add a Recipient condition to match your domain or email address (see the Guidelines for further info).
6. Add an Action to Deliver to S3 bucket.
7. Select an existing bucket or "Create S3 bucket" and enter a bucket name to store your email in.
8. If you plan to store email for multiple recipients in the bucket, enter a unique Object key prefix (otherwise leave it empty).
9. Leave other options at their defaults, review the rule settings, and confirm with "Create rule".

Step 4: Configure role based access for Odoo or create an AWS IAM User

If your Odoo server already has role based access to AWS (e.g. using an EC2 Instance Role):

1. Navigate to IAM in the AWS Console (type "iam" in the search bar and select IAM).
2. Select "Roles" in the left menu and find the role. Click the role name to open it.
3. Under Permissions, select "Add Permissions" / "Create inline policy".
4. Under the JSON tab, enter the JSON policy shown below.
5. Select "Review policy", enter a name for the policy, and select "Create policy".

If your Odoo server does NOT have role based access, create a new AWS IAM User and credentials:

1. Navigate to IAM in the AWS Console (type "iam" in the search bar and select IAM).
2. Select "Users" in the left menu and select "Add users" to create a new user.
3. Enter a user name for the new user account.
4. Select "Access key - Programmatic access" as the credential type, leave "Password" disabled.
5. Without adding the user to a group, select "Next: Tags", and then "Next: Review" to move on.
6. Select "Create user" to create the user. It will have no permissions at this point.
7. Copy the Access key ID and the Secret access key somewhere. You will need them later. Select "Close".
8. Select the new user you just created in the IAM user list.
9. Under Permissions, select "Add inline policy".
10. Under the JSON tab, enter JSON the policy shown below.
11. Select "Review policy", enter a name for the policy, and select "Create policy".

This is the inline JSON policy to create in both cases. Replace YOUR-BUCKET-NAME with the bucket you created earlier.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": "s3:ListBucket",
            "Resource": "arn:aws:s3:::YOUR-BUCKET-NAME",
            "Effect": "Allow"
        },
        {
            "Action": [
                "s3:GetObject",
                "s3:DeleteObject"
            ],
            "Resource": "arn:aws:s3:::YOUR-BUCKET-NAME/*",
            "Effect": "Allow"
        }
    ]
}

Step 5: Configure the Odoo Add-on

1. Install the "aws_ses_gateway" add-on to your Odoo server in the usual fashion.
2. Ensure that the Python modules in requirements.txt are installed.
3. If necessary, restart your Odoo server and sign in.
4. Navigate to Odoo main menu / Apps, find "Clouden AWS SES Gateway" and select Install to install it.
5. Navigate to Odoo main menu / Settings / General Settings / Discuss.
6. Configure your Alias Domain (see Odoo documentation for more information).

Step 6: Configure the AWS SES Gateway Add-on

1. Still under Discuss, Select "AWS SES Gateway Configurations", and select "Create" to add a new configuration.
2. Enter a Name for the new configuration.
3. Enter the Bucket Name that you used to configure a SES Receipt Rule.
4. Enter the Key Prefix that you used to configure a SES Receipt Rule (or leave empty if none).
5. If you created an IAM User earlier, enter the Access Key Id of its credentials.
6. If you created an IAM User earlier, enter the Secret Access Key of its credentials.
7. Enter the AWS region name you're using (e.g. "eu-west-1") or leave empty to use the default region.
8. Select "Test Connection" to verify that the configuration works. If there are problems, check each setting again.
9. Select "Save" to confirm creating the new configuration.

See also

Add-on home page: https://clouden.net/products/clouden-aws-ses-gateway-for-odoo