* 2.14.0 -- 2026-02-04

  - ses-domain
    - add variable enable_identity_feedback (true), set feedback

CHANGELOG.md

@@ -426,3 +426,7 @@
   - config
     - disable global iam things in non-east regions
     - allow for other resources to be excluded completely
+
+* 2.14.0 -- 2026-02-04
+  - ses-domain
+    - add variable enable_identity_feedback (true), set feedback

common/version.tf

@@ -1,3 +1,3 @@
 locals {
-  _module_version = "2.13.0"
+  _module_version = "2.14.0"
 }

ses-domain/README.md

@@ -392,6 +392,7 @@ No modules.
 | [aws_ses_domain_identity.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ses_domain_identity) | resource |
 | [aws_ses_domain_identity_verification.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ses_domain_identity_verification) | resource |
 | [aws_ses_domain_mail_from.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ses_domain_mail_from) | resource |
+| [aws_ses_identity_feedback_forwarding_enabled.feedback](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ses_identity_feedback_forwarding_enabled) | resource |
 | [aws_ses_identity_notification_topic.ses_event](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ses_identity_notification_topic) | resource |
 | [aws_sns_topic.ses_event](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sns_topic) | resource |
 | [aws_sns_topic_policy.ses_event](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sns_topic_policy) | resource |
@@ -410,6 +411,7 @@ No modules.
 |------|-------------|------|---------|:--------:|
 | <a name="input_account_alias"></a> [account\_alias](#input\_account\_alias) | AWS Account Alias | `string` | `""` | no |
 | <a name="input_account_id"></a> [account\_id](#input\_account\_id) | AWS Account ID (default will pull from current user) | `string` | `""` | no |
+| <a name="input_enable_identity_feedback"></a> [enable\_identity\_feedback](#input\_enable\_identity\_feedback) | SES Enable notificaton to Email for bounce, complaint, and/or delivery | `bool` | `true` | no |
 | <a name="input_enable_mail_from"></a> [enable\_mail\_from](#input\_enable\_mail\_from) | SES Enable set of Mail From domain ses\_mail\_from.DOMAIN | `bool` | `false` | no |
 | <a name="input_enable_production"></a> [enable\_production](#input\_enable\_production) | SES Enable calling of AWS CLI to move from sandbox to production | `bool` | `false` | no |
 | <a name="input_enable_sns_events"></a> [enable\_sns\_events](#input\_enable\_sns\_events) | SES Enable event notificaton to SNS for bounce, complaint, and/or delivery (specified by ses\_event\_notification\_types). | `bool` | `false` | no |
@@ -420,7 +422,7 @@ No modules.
 | <a name="input_ses_base_dkim_domain_name"></a> [ses\_base\_dkim\_domain\_name](#input\_ses\_base\_dkim\_domain\_name) | SES Base DKIM Domain Name | `string` | `"dkim.amazonses.com"` | no |
 | <a name="input_ses_base_domain_name"></a> [ses\_base\_domain\_name](#input\_ses\_base\_domain\_name) | SES Base Domain Name | `string` | `"aws.mail.census.gov"` | no |
 | <a name="input_ses_domain_name"></a> [ses\_domain\_name](#input\_ses\_domain\_name) | SES Fully Qualified Domain Name (default: {account\_id}.aws.mail.census.gov) | `string` | `""` | no |
-| <a name="input_ses_event_notification_types"></a> [ses\_event\_notification\_types](#input\_ses\_event\_notification\_types) | SNS Notification types for SNS.  Valid values are bounce, complaint, and delivery. | `list(string)` | <pre>[<br>  "bounce",<br>  "complaint"<br>]</pre> | no |
+| <a name="input_ses_event_notification_types"></a> [ses\_event\_notification\_types](#input\_ses\_event\_notification\_types) | SNS Notification types for SNS.  Valid values are bounce, complaint, and delivery. | `list(string)` | <pre>[<br/>  "bounce",<br/>  "complaint"<br/>]</pre> | no |
 | <a name="input_ses_mail_from"></a> [ses\_mail\_from](#input\_ses\_mail\_from) | SES mail from domain prepended to ses\_domain\_name.  See enable\_mail\_from for enabling this. | `string` | `"bounce"` | no |
 | <a name="input_ses_sns_topic_name"></a> [ses\_sns\_topic\_name](#input\_ses\_sns\_topic\_name) | SNS Topic name for event handling.  The region name will be appended. | `string` | `"inf-ses-events"` | no |
 | <a name="input_ses_use_case_description"></a> [ses\_use\_case\_description](#input\_ses\_use\_case\_description) | SES use case description (for move to production) | `string` | `""` | no |

ses-domain/main.tf

@@ -277,3 +277,8 @@ resource "aws_ses_identity_notification_topic" "ses_event" {
   identity                 = aws_ses_domain_identity.this.domain
   include_original_headers = true
 }
+
+resource "aws_ses_identity_feedback_forwarding_enabled" "feedback" {
+  identity = aws_ses_domain_identity.this.domain
+  enabled  = var.enable_identity_feedback
+}

ses-domain/variables.tf

@@ -90,3 +90,9 @@ variable "enable_sns_events" {
   type        = bool
   default     = false
 }
+
+variable "enable_identity_feedback" {
+  description = "SES Enable notificaton to Email for bounce, complaint, and/or delivery"
+  type        = bool
+  default     = true
+}