在AWS SES中迁移到签名版本4的影响，在那里我们使用AWS SES SMTP凭据在PHP应用程序中发送电子邮件？

Question

我们最近收到一封来自亚马逊的电子邮件。

Hello,

Amazon Web Services currently supports Amazon SES API requests that are signed using Signature 
Version 3 and Signature Version 4 processes. Signature Version 4 further enhances the security around 
authentication and authorization of Amazon SES customers by using a signing key instead of your 
secret access key. To improve the security for our customers, beginning October 1, 2020, Amazon 
Signature Version 3 will be turned off (deprecated) in Amazon SES in favor of Signature Version 4.

Amazon SES customers who are still using Signature Version 3 must migrate to Signature Version 4 by 
September 30, 2020. After that, Amazon SES will only accept requests that are signed using Signature 
Version 4. For more information, see Signature Version 4 signing process [1].

What Happens if I Don't Make Updates?

Requests signed with Signature Version 3 that are made after September 30, 2020 will fail to 
authenticate with Amazon SES. Requesters will see errors stating that the request must be signed with 
Signature Version 4.

References:
[1] https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html

Sincerely,
Amazon Web Services

Amazon Web Services, Inc. is a subsidiary of Amazon.com, Inc. Amazon.com is a registered trademark of 
Amazon.com, Inc. This message was produced and distributed by Amazon Web Services Inc., 410 Terry 
Ave. North, Seattle, WA 98109-5210

我们有几个PHP Codeigniter应用程序，其中我们使用Amazon SES SMTP凭据发送电子邮件。我们不使用AWS访问密钥

Answer 1

如果您使用SES SMTP凭据使用SMTP发送电子邮件，您可能仍会受到影响。SES SMTP凭据已签名，2019年2月之前，AWS在通过SES控制台生成凭据时使用SignatureV2。AWS员工的论坛帖子证实了这一点：

如果您指的是发送给几个客户的通信，以便从Smtp的V2凭据迁移到V4凭据，是的，即使您不使用SDK，您也必须这样做。

Answer 2

如果您使用SMTP使用SES发送电子邮件，sigv4不应影响您，它仅用于sendemail或sendrawemail api调用。