feat(ses-actions): WorkMail rule action

packages/aws-cdk-lib/aws-ses-actions/README.md

@@ -11,6 +11,7 @@ Currently supported are:
 * [Lambda](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-action-lambda.html)
 * [S3](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-action-s3.html)
 * [SNS](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-action-sns.html)
+* [WorkMail](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-action-workmail.html)
 * [Stop](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/receiving-email-action-stop.html)
 
 See the README of `aws-cdk-lib/aws-ses` for more information.

packages/aws-cdk-lib/aws-ses-actions/lib/index.ts

@@ -4,3 +4,4 @@ export * from './lambda';
 export * from './s3';
 export * from './sns';
 export * from './stop';
+export * from './workmail';

packages/aws-cdk-lib/aws-ses-actions/lib/workmail.ts

@@ -0,0 +1,45 @@
+import * as ses from '../../aws-ses';
+import * as sns from '../../aws-sns';
+
+/**
+ * Construction properties for a WorkMail action.
+ */
+export interface WorkMailProps {
+  /**
+   * The WorkMail organization ARN.
+   *
+   * @example 'arn:aws:workmail:us-east-1:123456789012:organization/m-organizationid'
+   */
+  readonly organizationArn: string;
+
+  /**
+   * The SNS topic to notify when the WorkMail action is taken.
+   *
+   * @default - no topic will be attached to the action
+   */
+  readonly topic?: sns.ITopic;
+}
+
+/**
+ * Integrates an Amazon WorkMail action into a receipt rule set,
+ * and optionally publishes a notification to Amazon SNS.
+ *
+ * Beware that WorkMail should already set up an active `INBOUND_MAIL` rule set
+ * that includes a WorkMail rule action for this exact purpose.
+ * This action should be used to customize the behavior of replacement rule set.
+ *
+ * @see https://docs.aws.amazon.com/ses/latest/dg/receiving-email-action-workmail.html
+ */
+export class WorkMail implements ses.IReceiptRuleAction {
+  constructor(private readonly props: WorkMailProps) {
+  }
+
+  public bind(_rule: ses.IReceiptRule): ses.ReceiptRuleActionConfig {
+    return {
+      workmailAction: {
+        organizationArn: this.props.organizationArn,
+        topicArn: this.props.topic?.topicArn,
+      },
+    };
+  }
+}

packages/aws-cdk-lib/aws-ses-actions/test/actions.test.ts

@@ -294,3 +294,26 @@ test('add stop action', () => {
     },
   });
 });
+
+test('add workmail action', () => {
+  rule.addAction(new actions.WorkMail({
+    organizationArn: 'arn:aws:workmail:us-east-1:123456789012:organization/m-organizationid',
+    topic,
+  }));
+
+  Template.fromStack(stack).hasResourceProperties('AWS::SES::ReceiptRule', {
+    Rule: {
+      Actions: [
+        {
+          WorkmailAction: {
+            OrganizationArn: 'arn:aws:workmail:us-east-1:123456789012:organization/m-organizationid',
+            TopicArn: {
+              Ref: 'TopicBFC7AF6E',
+            },
+          },
+        },
+      ],
+      Enabled: true,
+    },
+  });
+});