1309920 - Create DNS records for sso.mozilla.com to enable sending email from AWS SES

Status: RESOLVED FIXED

(Infrastructure & Operations :: SSL Certificates, task)

Description

[Gene Wood [:gene]]

Please establish these DNS records to allow us to send email from the AWS infosec-prod account's SES product. These records do 3 things
* prove to AWS that we, the owner of the domain, permit SES to send email from that domain
* establish DKIM keys for sending
* configure inbound email for the domain to also be sent to SES


"Record name","Record type","Record Value"
"_amazonses.sso.mozilla.com","TXT","urY4DqWdlyHfbYNd3JtKnW+cJlWR83GJL4XkaZYlJB4="
"djibmc2gvzwjtdg2g6oqgcfqizc74ac3._domainkey.sso.mozilla.com","CNAME","djibmc2gvzwjtdg2g6oqgcfqizc74ac3.dkim.amazonses.com"
"jcf3snvcvrq5vcafbtfm3ipgicgyd4ue._domainkey.sso.mozilla.com","CNAME","jcf3snvcvrq5vcafbtfm3ipgicgyd4ue.dkim.amazonses.com"
"qmlvmdv2lsceiusbcnxadqs5l3jwtumh._domainkey.sso.mozilla.com","CNAME","qmlvmdv2lsceiusbcnxadqs5l3jwtumh.dkim.amazonses.com"
"sso.mozilla.com","MX","10 inbound-smtp.us-west-2.amazonaws.com"

Comment 1

[Gene Wood [:gene]]

Turns out because sso.mozilla.com is a CNAME not A record, establishing an MX record would require changing from CNAME to A. As a result let's remove that part of this request and worry about it later.

Joey setup the other records already and I've tested them and verified everything is working. Thanks gents!

Comment 2

[Joey Krejci [:joeyk]]

Added these records as requested:

"Record name","Record type","Record Value"
"_amazonses.sso.mozilla.com","TXT","urY4DqWdlyHfbYNd3JtKnW+cJlWR83GJL4XkaZYlJB4="
"djibmc2gvzwjtdg2g6oqgcfqizc74ac3._domainkey.sso.mozilla.com","CNAME","djibmc2gvzwjtdg2g6oqgcfqizc74ac3.dkim.amazonses.com"
"jcf3snvcvrq5vcafbtfm3ipgicgyd4ue._domainkey.sso.mozilla.com","CNAME","jcf3snvcvrq5vcafbtfm3ipgicgyd4ue.dkim.amazonses.com"
"qmlvmdv2lsceiusbcnxadqs5l3jwtumh._domainkey.sso.mozilla.com","CNAME","qmlvmdv2lsceiusbcnxadqs5l3jwtumh.dkim.amazonses.com"

Per our conversation in #systems, we will deal with the MX record in the future since it requires change requests and what not. 


^^^ 
Just for reference later.