Today, Amazon Simple Email Service (SES) released a feature which gives customers visibility into the Transport Layer Security (TLS) version used in the messages sent through SES. Customers can track email sending at a granular level by publishing email sending events to various AWS services such as Amazon CloudWatch. Customers can also categorize their emails by using message tags defined in configuration sets. This feature adds a new auto-tag to the existing set of auto-tags that SES automatically applies, in addition to the message tags specified by customers.
Previously, SES generated auto-tags such as “ses:source-tls-version” to identify TLS protocol version used by the caller to send the email. However, customers did not have a way to determine the TLS version used by SES to send the email. Now, SES includes the “ses:outgoing-tls-version” auto-tag, which contains the TLS protocol version that SES used to send the email. Customers can leverage this new auto-tag to better understand and monitor the TLS version used when SES sends emails to mailbox providers that do not support the latest versions of TLS.
SES supports “ses:outgoing-tls-version” in all AWS regions where Amazon SES is offered.
For more information, see the documentation for SES event publishing.
Source:: Amazon AWS