Move aws ses dkim keys into terraform

modules/infrastructure/aws-ses.tf

@@ -0,0 +1,4 @@
+resource "aws_sesv2_email_identity" "domains" {
+  for_each = var.email_domains
+  email_identity = each.value
+}

modules/infrastructure/main.tf

@@ -1,5 +1,9 @@
 terraform {
   required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
     contabo = {
       source = "contabo/contabo"
       version = "~> 0.1.26"

modules/infrastructure/output.tf

@@ -70,3 +70,10 @@ output "scaleway_registry_endpoint_public" {
 output "scaleway_registry_endpoint_private" {
   value = scaleway_registry_namespace.private.endpoint
 }
+
+output "aws_ses_dkim" {
+  value = {
+    for key, dkim in aws_sesv2_email_identity.domains : key => dkim.dkim_signing_attributes[0].tokens
+  }
+  sensitive = true
+}

modules/infrastructure/variables.tf

@@ -41,3 +41,7 @@ variable "hosts" {
     datacenter = optional(string)
   }))
 }
+
+variable "email_domains" {
+  type = set(string)
+}