AWS SES - Open rate and Click rate - amazon-ses

I used to send a email from AWS SES and wants to track the email metrics (open and click rate).
I could see that AWS SES which may connect to Amazon CloudWatch, Amazon Kinesis Data Firehose, or
Amazon Simple Notification Service to track email sending at a granular level.
What are the usages for AWS cloud watch, SNS or Amazon Kinesis Data Firehose?
Is there any other API to fetch open and click rates from AWS SES Service?.
Thanks
I need a API to fetch click rate and open rate from AWS SES.

Related

gcp how to edit cloud api access scopes on running nodes in GKE

I have an issue. on existing cluster selected cloud api access scopes "Storage
Read Only" but cronjob must to push backups to cloud storage and got error 403. So how can i change it?

Identify what SES calls are using version 2 signature logins

Like many I'm sure, we've received an email from Amazon stating:
We recently observed Signature Version 2 requests on an Amazon SES SMTP endpoint originating from your account.
Is there any way to identify what these calls are as we have several IAM users and large codebases and haven't yet been able to trace the origin of these calls.
I'm thinking this should be possible with CloudWatch/CloudTrail but can't see how to do this.
From a question in the AWS dev forum
If your existing smtp credentials were created via console, the creation date (visible in IAM console) can be an indication of Signature v2 usage, as smtp users created via the SES console before Feb 2019 were Signature v2 signed. Credentials created in the SES console after this date are signed using Signature v4.
You can't use CloudTrail to audit SES send events because SES only delivers management events to CloudTrail, as mentioned here.
You can't use SES event publishing because it doesn't contain the request details that triggered the send.
As mentioned on this AWS forum thread, according to an AWS representative they are working on a way to track SigV2 usage, however that's not too helpful considering they will begin to throttle SigV2 requests in 10 days.
So currently, the best way to identify credentials still using SigV2 is to:
Regenerate all credentials created in the SES console
Generate SigV4 SES credentials from all IAM credentials that may be using SES and compare them to the SES credentials that you are actually using.

EC2 instance launched S3 Endpoint subnet unable to list bucket object with endpoint bucket policy

I have created S3endpoint and added it to route table of a subnet.
Subnet has route to internet and able to open AWS console.
Next a bucket is created with bucket policy limiting access to it through VPC endpoint.
I have IAM user which has full permission to this bucket.
When i access the S3 bucket through S3 console webpage there is an error 'Access Denied' but i am able to upload files to the bucket.
Does S3 endpoint imply that only access will be through AWS CLI \SDKs? and console access is limited?
Does S3 endpoint imply that only access will be through AWS CLI \SDKs?
and console access is limited?
My understanding is that any calls done in the AWS Console will not use the endpoint setup within the VPC, even if you're accessing it via an EC2 instance within the VPC. This is because the UI within the AWS Console does not directly access the S3 API Endpoint, but instead goes through a proxy to reach the endpoint.
If you need to access the S3 bucket via the AWS Console, you'll need to amend your bucket policy.

AWS CLI - how to get when the file was changed

A client is uploading data we use to AWS S3. I need to find out when the uploads took place in the last week (or month). How could I go about that? If I use aws s3 ls path I get only the date of the last change.
To obtain historical information about Amazon S3 API calls, you can use AWS CloudTrail.
From Logging Amazon S3 API Calls by Using AWS CloudTrail - Amazon Simple Storage Service:
Amazon S3 is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Amazon S3. CloudTrail captures a subset of API calls for Amazon S3 as events, including calls from the Amazon S3 console and from code calls to the Amazon S3 APIs.
To use object-level logging, see: How Do I Enable Object-Level Logging for an S3 Bucket with AWS CloudTrail Data Events? - Amazon Simple Storage Service

amazon seller account message fetching way

I want to pull the messages that I am getting in my amazon seller central account, and I want to reply them manually. I have checked amazon mws API's but I can find such API to pull and push messages.
But there are some third-party applications that deal with these things like https://www.replymanager.com/
we can integrate Amazon seller account, then we get all messages in reply manager and we can reply too.
If Amazon provides no API then how https://www.replymanager.com/ works??
They aren't managing anything via an API.
Amazon lets you manage customer service messages via an email address that you supply seller central (check notification preferences maybe?)
Reply manager manages email replies.