AWS
Amazon SES
The Send service sends each Brand’s email through SES from its Identity domain.
Terraform in infra/ creates the SES domain identities with DKIM and MAIL FROM, plus per-site IAM users and SMTP credentials. The Send service is the only holder of SES send credentials.