# ============================================================================
# AWS SES Configuration
# ============================================================================
# Configures AWS Simple Email Service for sending alert notifications

# Email identity for sending alerts
resource "aws_ses_email_identity" "alert_email" {
  email = var.alert_email
}

# IAM user for SMTP authentication
resource "aws_iam_user" "ses_smtp_user" {
  name = "${var.project_name}-ses-smtp-user"
  path = "/system/"

  tags = {
    Name = "${var.project_name}-ses-smtp-user"
  }
}

# Policy allowing the SMTP user to send emails via SES
resource "aws_iam_user_policy" "ses_smtp_user_policy" {
  name = "${var.project_name}-ses-smtp-policy"
  user = aws_iam_user.ses_smtp_user.name

  policy = jsonencode({
    Version = "2012-10-17"
    Statement = [
      {
        Effect = "Allow"
        Action = [
          "ses:SendEmail",
          "ses:SendRawEmail"
        ]
        Resource = "*"
      }
    ]
  })
}

# Access key for SMTP authentication
resource "aws_iam_access_key" "ses_smtp_access_key" {
  user = aws_iam_user.ses_smtp_user.name
}