• Send emails from the root domain
  • This consolidates sending reputation and provides cleaner branding
• Add DMARC policy to SMTP module
  • This should enhance email deliverability and harden the domain against forged emails
• Add an SNS topic for email failures
  • This is available as the output smtp_failures_topic_arn
  • This has no subscribers by default
• Update S3 Access-Control-Expose-Headers
  • In particular, allow Content-Range on GET requests
• Use AWS SESv2 for identity verification
  • This removes 3 obsolete DNS TXT records