feat: add ses relay

[smohiudd]

Description

SMCE does not allow creating SMTP credentials for security reasons so we need an SES relay.
Add Fargate service with NLB for SES relay (https://github.com/loopingz/smtp-relay/)

[github-actions]

Diff for stage: DefaultStage

Warning

1 Destructive Changes

No Changes for stack: veda-keycloak-dev ✅

Diff for stack: veda-ses-relay-dev - 0 to add, 1 to update, 0 to destroy ❌

Details

[!WARNING]
Destructive Changes ‼️
Stack: veda-ses-relay-dev - Resource: FargateServiceTaskDef940E3A80 - Impact: WILL_REPLACE

Resources
[~] AWS::ECS::TaskDefinition FargateServiceTaskDef940E3A80 replace
 └─ [~] ContainerDefinitions (requires replacement)
     └─ @@ -2,7 +2,7 @@
        [ ] {
        [ ]   "Essential": true,
        [ ]   "Image": {
        [-]     "Fn::Sub": "${AWS::AccountId}.dkr.ecr.${AWS::Region}.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-${AWS::AccountId}-${AWS::Region}:c787de7da6b3c3ff211ffbf82a777354ce81afe738e0999e50ef22197e29d268"
        [+]     "Fn::Sub": "${AWS::AccountId}.dkr.ecr.${AWS::Region}.${AWS::URLSuffix}/cdk-hnb659fds-container-assets-${AWS::AccountId}-${AWS::Region}:0e337c22a95ac353500e03a9a71f167eaf17e4ded349977937c57d653dbfb596"
        [ ]   },
        [ ]   "LogConfiguration": {
        [ ]     "LogDriver": "awslogs",

Generated for commit 9ed071d at 2026-01-06T21:18:29.851Z

[alukach]

The relay authenticates to AWS using IAM (task role) and delivers messages to SES using the SES API (for example, ses:SendEmail, ses:SendRawEmail), avoiding the need for SES SMTP credentials.

Wow, very interesting/clever technique! Looks good!