Title: SFLWA Identity &amp; Tenant Provisioner for Amazon SES
Author: sflwa
Published: <strong>August 1, 2026</strong>
Last modified: August 2, 2026

---

Search plugins

![](https://ps.w.org/sflwa-tenant-identity-provisioner-amazon-ses/assets/banner-
772x250.png?rev=3631293)

![](https://ps.w.org/sflwa-tenant-identity-provisioner-amazon-ses/assets/icon-128x128.
png?rev=3631293)

# SFLWA Identity & Tenant Provisioner for Amazon SES

 By [sflwa](https://profiles.wordpress.org/sflwa/)

[Download](https://downloads.wordpress.org/plugin/sflwa-tenant-identity-provisioner-amazon-ses.1.3.3.zip)

 * [Details](https://wordpress.org/plugins/sflwa-tenant-identity-provisioner-amazon-ses/#description)
 * [Reviews](https://wordpress.org/plugins/sflwa-tenant-identity-provisioner-amazon-ses/#reviews)
 *  [Installation](https://wordpress.org/plugins/sflwa-tenant-identity-provisioner-amazon-ses/#installation)
 * [Development](https://wordpress.org/plugins/sflwa-tenant-identity-provisioner-amazon-ses/#developers)

 [Support](https://wordpress.org/support/plugin/sflwa-tenant-identity-provisioner-amazon-ses/)

## Description

**SFLWA Identity & Tenant Provisioner for Amazon SES** provides agency-grade, automated
multi-tenant onboarding and monitoring for Amazon SES using native SES API v2.

Effortlessly provision isolated client tenants, create sending identities, assign
default configuration sets, auto-generate dedicated IAM credentials, and monitor
client tenant health directly from your WordPress admin dashboard.

### Key Features:

 * **Automated Tenant Onboarding:** Creates SES API v2 tenants, creates domain identities,
   and binds them to specified tenant resources automatically.
 * **Automated IAM Provisioning:** Creates dedicated IAM sending users, adds them
   to your designated sending group, and issues access keys upon setup.
 * **Instant DKIM CNAME Records:** Generates short host, fully qualified domain 
   names (FQDN), and CNAME target values with one-click copy buttons.
 * **X-SES-TENANT Header Snippet:** Produces ready-to-use WordPress code snippets(`
   wp_mail` hook) for client site integration.
 * **Native Tenant Statistics Dashboard:** Displays current sending status, assigned
   domain identities, bound configuration sets, and reputation impact warnings across
   all saved parent accounts.
 * **Multi-Account Support:** Easily switch between different parent AWS operator
   accounts.
 * **Zero Additional API Costs:** Designed strictly around native Amazon SES API
   v2 calls (`ListTenants`, `GetTenant`, `ListTenantResources`) to keep overhead
   completely free.

### IAM Operator Policy

Your parent AWS Operator user requires an IAM policy permitting SES API v2 tenant
management, IAM user provisioning, and STS caller identity verification.

Attach the following policy to your operator user in AWS IAM:

    ```
    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "SESManagementAndReportingPermissions",
                "Effect": "Allow",
                "Action": [
                    "ses:CreateEmailIdentity",
                    "ses:GetEmailIdentity",
                    "ses:CreateTenant",
                    "ses:CreateTenantResourceAssociation",
                    "ses:ListTenants",
                    "ses:GetTenant",
                    "ses:ListTenantResources"
                ],
                "Resource": "*"
            },
            {
                "Sid": "IAMUserAndGroupProvisioning",
                "Effect": "Allow",
                "Action": [
                    "iam:CreateUser",
                    "iam:AddUserToGroup",
                    "iam:CreateAccessKey",
                    "iam:AttachUserPolicy"
                ],
                "Resource": "*"
            },
            {
                "Sid": "STSCallerIdentity",
                "Effect": "Allow",
                "Action": [
                    "sts:GetCallerIdentity"
                ],
                "Resource": "*"
            }
        ]
    }
    ```

### External Services

This plugin integrates directly with Amazon Web Services (AWS) via official API 
calls to provision and monitor Amazon Simple Email Service (SES) resources.

 * Service Name: Amazon Simple Email Service (SES) API v2
 * Primary Usage: Submits domain and email verification requests, fetches DKIM/DNS
   records, manages tenant identities, and retrieves account health statistics.
 * AWS Terms of Service: https://aws.amazon.com/service-terms/
 * AWS Customer Agreement: https://aws.amazon.com/agreement/
 * AWS Privacy Notice: https://aws.amazon.com/privacy/

### Thank You

Thank you to WebCami for your support of my work.

## Installation

 1. Upload the `sflwa-tenant-identity-provisioner-amazon-ses` folder to the `/wp-content/
    plugins/` directory (or upload the `.zip` archive via **Plugins > Add New**).
 2. Activate the plugin through the **Plugins** menu in WordPress.
 3. Run `composer install` inside the plugin directory if installing from source to
    generate the required vendor autoloader (`vendor/autoload.php`).
 4. Go to **SES Tenants > AWS Settings** in your WP Admin sidebar.
 5. Add your parent AWS Account Operator credentials and default Configuration Set 
    name.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“SFLWA Identity & Tenant Provisioner for Amazon SES” is open source software. The
following people have contributed to this plugin.

Contributors

 *   [ sflwa ](https://profiles.wordpress.org/sflwa/)

[Translate “SFLWA Identity & Tenant Provisioner for Amazon SES” into your language.](https://translate.wordpress.org/projects/wp-plugins/sflwa-tenant-identity-provisioner-amazon-ses)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/sflwa-tenant-identity-provisioner-amazon-ses/),
check out the [SVN repository](https://plugins.svn.wordpress.org/sflwa-tenant-identity-provisioner-amazon-ses/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/sflwa-tenant-identity-provisioner-amazon-ses/)
by [RSS](https://plugins.trac.wordpress.org/log/sflwa-tenant-identity-provisioner-amazon-ses/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.3.3

 * Feature: Added one-click copy buttons for IAM Access Key ID and Secret Access
   Key upon tenant provisioning.
 * Feature: Added dedicated copy button for the WordPress `X-SES-TENANT` mail header
   snippet.
 * Security & Permissions: Automatically attach `AmazonSESFullAccess` managed IAM
   policy to newly provisioned tenant users to ensure broad compatibility with third-
   party SMTP plugins.
 * Usability: Implemented case-insensitive alphabetical sorting (`uasort`) for AWS
   Account dropdowns and statistics views.

#### 1.3.2

 * Fix: Resolved admin menu slug collisions across primary and submenu items to 
   maintain full compliance with WordPress Plugin Review Guidelines.
 * Optimization: Standardized distribution archiving and pruned unused AWS SDK dependencies
   to significantly reduce SVN repository package size.
 * Core: Refactored option key storage and legacy data migration checks for improved
   database handling.

#### 1.3.1

 * Feature: Added one-click copy buttons for short host, FQDN, and target values
   on generated DKIM CNAME DNS records.
 * UI: Enqueued dedicated admin inline JavaScript (`sflwa-stp-script`) for seamless
   clipboard copying interactions.
 * Usability: Visual feedback added to copy buttons showing temporary success states
   upon user interaction.

#### 1.3.0

 * Security & Standards: Fixed output escaping, input unslashing, global scope variable
   naming, and script enqueue parameters per Plugin Check guidelines.
 * UI Enhancement: Separated associated domains and configuration sets into distinct
   table columns on the Tenant Statistics page.
 * Performance: Optimized reporting logic around native SES API v2 calls (`listTenants`,`
   getTenant`, `listTenantResources`).

#### 1.2.0

 * Standardized dashboard interface to native WordPress admin table styles.
 * Added custom inline JavaScript clipboard helpers for DKIM records and header 
   code snippets.

#### 1.1.0

 * Complete plugin rebranding to **SFLWA Identity & Tenant Provisioner for Amazon
   SES**.
 * Added option database key migration check (`ses_tenant_provisioner_accounts` -
   > `sflwa_stp_accounts`).

#### 1.0.0

 * Initial release.

## Meta

 *  Version **1.3.3**
 *  Last updated **5 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 5.8 or higher **
 *  Tested up to **7.0.2**
 * Tags
 * [Amazon SES](https://wordpress.org/plugins/tags/amazon-ses/)[aws](https://wordpress.org/plugins/tags/aws/)
   [DKIM](https://wordpress.org/plugins/tags/dkim/)[multi-tenant](https://wordpress.org/plugins/tags/multi-tenant/)
   [SES](https://wordpress.org/plugins/tags/ses/)
 *  [Advanced View](https://wordpress.org/plugins/sflwa-tenant-identity-provisioner-amazon-ses/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/sflwa-tenant-identity-provisioner-amazon-ses/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/sflwa-tenant-identity-provisioner-amazon-ses/reviews/)

## Contributors

 *   [ sflwa ](https://profiles.wordpress.org/sflwa/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/sflwa-tenant-identity-provisioner-amazon-ses/)