aws-lambda-ses-account-monitor

AWS Lambda function for monitoring SES account metrics.

The following metrics are monitored:

• SES sending quota
• SES account reputation (bounce rate and complaint rate)

The following services to send notifications are supported:

• Slack
• PagerDuty

The lambda should be set to run on a period of every 15 minutes.

It will check to see if the SES account sending quota is at the thresholds, and if so queue up notification alerts.

Then it will check the SES account reputation metrics. If they are at or exceed thresholds, if the SES_MONITOR_STRATEGY of manged is set, then SES account sending will be disabled (paused), until the reputation is in a healthy state. After that notifications are queued up.

Finally all the notifications are flushed and sent out. If any notifications fail to send, then a exception is thrown, to let AWS automatically retry the lambda.

The SES account sending quota rates by default are set to 80% as the warning and 90% as the critical threshold.

The bounce rate should not exceed 10% and the complaint rate should not exceed 0.1%, or AWS will suspend the account. AWS recommended warnings (10% and 0.05%) are used as the default warning thresholds. The critical thresholds are set to be at around the ~80% of the suspension levels.

Requirements

• Python 3.6

Development

git clone https://github.com/mikechau/aws-lambda-ses-account-monitor.git
cd aws-lambda-ses-account-monitor

make init
source ./venv/bin/activate

Testing

pytest

Building

make

Versioning

# Bump version major
make major

# Bump version minor
make minor

# Bump version patch
make patch

# Push to GitHub
make release

A commit incrementing the version will be created as well as the version tag.

The version is saved to .bumpversion.cfg.

Deploying

Download the package from releases or build it locally. The artifact path locally is at build/lambda-ses-monitor-account.py.zip.

The handler is located at lambda_handler.lambda_handler.

Configuration

ENVIRONMENT VARIABLE	TYPE	DEFAULT VALUE	CUSTOM EXAMPLE	Description
LAMBDA_AWS_ACCOUNT_NAME	str	undefined	supercoolco	AWS account name.
LAMBDA_AWS_REGION	str	None	us-west-2	AWS region.
LAMBDA_ENVIRONMENT	str	undefined	global	Lambda environment.
LAMBDA_NAME	str	ses-account-monitor	ses-monitor	Lambda name.
LAMBDA_SERVICE_NAME	str	$LAMBDA_AWS_ACCOUNT_NAME-$LAMBDA_AWS_REGION-$LAMBDA_ENVIRONMENT-$LAMBDA_NAME	supercoolco-us-west-2-global-ses-account-monitor	Lambda service name, if you want to override the inferred name.
LOG_LEVEL	str	INFO	WARNING	Log level.
MONITOR_SES_REPUTATION	bool	True	False	Flag to monitor SES account reputation.
MONITOR_SES_SENDING_QUOTA	bool	True	False	Flag to monitor SES account sending quota.
NOTIFY_DRY_RUN	bool	False	True	Flag to enable notification dry runs, notifications will not be sent.
NOTIFY_PAGER_DUTY_ON_SES_REPUTATION	bool	False	True	Flag to enable PagerDuty notifications when SES account reputation reaches thresholds.
NOTIFY_PAGER_DUTY_ON_SES_SENDING_QUOTA	bool	False	True	Flag to enable PagerDuty notifications when SES account sending quota reaches thresholds.
NOTIFY_SLACK_ON_SES_REPUTATION	bool	False	True	Flag to enable Slack notifications when SES account reputation reaches thresholds.
NOTIFY_SLACK_ON_SES_SENDING_QUOTA	bool	False	True	Flag to enable Slack notifications when SES account sending quota reaches thresholds.
PAGER_DUTY_EVENTS_URL	str	https://events.pagerduty.com/v2/enqueue	-	PagerDuty events url.
PAGER_DUTY_ROUTING_KEY	str	None	abcefg1234567	PagerDuty routing key.
SES_BOUNCE_RATE_CRITICAL_PERCENT	float	8	9	Percentage for critical threshold, AWS suspension is at 10+.
SES_BOUNCE_RATE_WARNING_PERCENT	float	5	7	Percentage for warning th reshold, AWS warning recommendation is 5.
SES_COMPLAINT_RATE_CRITICAL_PERCENT	float	0.04	0.045	Percentage for critical threshold, AWS suspension is at 0.5+.
SES_COMPLAINT_RATE_WARNING_PERCENT	float	0.01	0.03	Percentage for warning threshold, AWS recommendation is at 0.1.
SES_SENDING_QUOTA_WARNING_PERCENT	float	80	85	Percentage for warning threshold.
SES_SENDING_QUOTA_CRITICAL_PERCENT	float	90	95	Percentage for critical threshold.
SES_REPUTATION_PERIOD	int	900	1800	-
SES_REPUTATION_METRIC_TIMEDELTA	int	1800	3600	Used to calculate the start time for retrieving the metric data.
SES_MONITOR_STRATEGY	str	alert	managed	Strategy for how to handle metrics at threshold levels. Default is to alert only. Switch to managed to enable SES autopausing.
SLACK_CHANNELS	list	''	#general,#dev-ops,#alerts	Comma delimited list of channels to post notifications to.
SLACK_FOOTER_ICON_URL	str	https://platform.slack-edge.com/img/default_application_icon.png	-	URL for the Slack message footer icon.
SLACK_ICON_EMOJI	str	None	:dragon:	Slack icon emoji, optional.
SLACK_WEBHOOK_URL	str	None	https://hooks.slack.com/services/T00000000/B00000000/XXXXXXXXXXXXXXXXXXXXXXXX	Slack webook url.

License

MIT.