output "domain_verification_record" {
  value = {
    name  = "_amazonses.${var.email_domain}"
    type  = "TXT"
    value = aws_ses_domain_identity.this.verification_token
  }
}

output "dkim_records" {
  value = [
    for token in aws_ses_domain_dkim.this.dkim_tokens : {
      name  = "${token}._domainkey.${var.email_domain}"
      type  = "CNAME"
      value = "${token}.dkim.amazonses.com"
    }
  ]
}

output "mail_from_domain" {
  value = aws_ses_domain_mail_from.this.mail_from_domain
}

output "smtp_username" {
  value = aws_iam_access_key.ses_smtp.id
}

output "smtp_secret" {
  value     = aws_iam_access_key.ses_smtp.secret
  sensitive = true
}