Help us learn about your current experience with the documentation. Take the survey.

Amazon SES Mailer settings

  • Tier: Free, Premium, Ultimate
  • Offering: GitLab Self-Managed

To send application emails using the Amazon SES API, add the following configuration to /etc/gitlab/gitlab.rb and run gitlab-ctl reconfigure.

If you enabled SMTP, set gitlab_rails['smtp_enable'] to false. When SMTP is enabled, it overrides the Amazon SES mailer, and GitLab sends email through SMTP.

Authenticate with an IAM role

To authenticate with an IAM role, provide the role Amazon Resource Name (ARN). Credentials are obtained through AWS Security Token Service (STS).

gitlab_rails['amazon_ses_mailer_enabled'] = true
gitlab_rails['amazon_ses_mailer_region'] = "<your_aws_region>"
gitlab_rails['amazon_ses_mailer_role_arn'] = "arn:aws:iam::123456789012:role/<your_role>"

Authenticate with static keys

To authenticate with static keys, provide the access key ID and secret access key.

gitlab_rails['amazon_ses_mailer_enabled'] = true
gitlab_rails['amazon_ses_mailer_region'] = "<your_aws_region>"
gitlab_rails['amazon_ses_mailer_access_key_id'] = "<your_aws_access_key_id>"
gitlab_rails['amazon_ses_mailer_secret_access_key'] = "<your_aws_secret_access_key>"

Authenticate with the AWS credential provider chain

When you omit role_arn, access_key_id, and secret_access_key, GitLab falls back to the AWS credential provider chain. The chain checks credentials from sources such as environment variables, a shared profile, ECS, and EC2.

gitlab_rails['amazon_ses_mailer_enabled'] = true
gitlab_rails['amazon_ses_mailer_region'] = "<your_aws_region>"