• Verifies the domain identity in AWS SES
• Configures a custom MAIL FROM domain
• Sets up the SES receipt rule set for inbound mail
• Optionally creates the required Route 53 DNS records
• Reconciles Mail Manager archive and SES configuration settings
• Provisions mailbox access with SMTP and S3 credentials

The same binary also runs as the AWS Lambda function that powers the Email Address request form, so it expects an AWS principal with the same provisioning permissions: sts:GetCallerIdentity; SES/SESv2 and Mail Manager; S3 mailbox bucket setup; IAM users, roles, inline policies, and iam:PassRole; Lambda child functions and logs; EventBridge Scheduler; and Route 53 ListHostedZones/ChangeResourceRecordSets.

Download the .deb package below, then install it with apt so its dependencies (libc6 (>= 2.30) and libgcc-s1) are resolved automatically:

sudo apt install ./onboard-new-email-address_0.1.0_amd64.deb

Run onboard-new-email-address with your AWS credentials configured to start the interactive provisioning flow. Invoked without arguments and an AWS Lambda runtime environment, the same binary instead runs as the Lambda handler.