AWS Amplify Gen 2 でユーザのサインアップ時にメール通知する

npm outdated | awk '{print $1, $2, $3, $4}' | awk 'NR==1 {print "| " $1 " | " $2 " | " $3 " | " $4 " |"; print "| --- | --- | --- | --- |"} NR>1 {print "| " $1 " | " $2 " | " $3 " | " $4 " |"}'

 @aws-amplify/backend                ^1.5.0  →    ^1.16.1
 @aws-amplify/backend-cli            ^1.2.9  →     ^1.7.2
 @aws-amplify/ui-react               ^6.5.5  →    ^6.11.2
 @types/react                      ^18.2.66  →    ^19.1.4
 @types/react-dom                  ^18.2.22  →    ^19.1.5
 @typescript-eslint/eslint-plugin    ^7.2.0  →    ^8.32.1
 @typescript-eslint/parser           ^7.2.0  →    ^8.32.1
 @vitejs/plugin-react                ^4.2.1  →     ^4.4.1
 aws-amplify                         ^6.6.6  →    ^6.14.4
 aws-cdk                           ^2.138.0  →  ^2.1016.0
 aws-cdk-lib                       ^2.138.0  →   ^2.196.0
 constructs                         ^10.3.0  →    ^10.4.2
 esbuild                            ^0.20.2  →    ^0.25.4
 eslint                             ^8.57.0  →    ^9.27.0
 eslint-plugin-react-hooks           ^4.6.0  →     ^5.2.0
 eslint-plugin-react-refresh         ^0.4.6  →    ^0.4.20
 react                              ^18.2.0  →    ^19.1.0
 react-dom                          ^18.2.0  →    ^19.1.0
 tsx                                 ^4.7.2  →    ^4.19.4
 typescript                          ^5.4.5  →     ^5.8.3
 vite                               ^5.4.10  →     ^6.3.5

import { defineFunction } from '@aws-amplify/backend';

export const postConfirmation = defineFunction({
  name: 'post-confirmation',
  environment: {
    TARGET_ADDRESS: 'nishimura.naoki@example.com',
    SOURCE_ADDRESS: 'Amplifyテスト <naonishi@mail.example.com>'
  }
});

$ npm install @aws-sdk/client-ses

import type { PostConfirmationTriggerHandler } from 'aws-lambda';
import { env } from '$amplify/env/post-confirmation';
import { SESClient, SendEmailCommand } from '@aws-sdk/client-ses';

// SESクライアントの初期化
const sesClient = new SESClient({ region: process.env.REGION || 'ap-northeast-1' });

export const handler: PostConfirmationTriggerHandler = async (event) => {
  try {
    const userAttributes = event.request.userAttributes;
    const email = userAttributes['email'];
    const name = userAttributes['name'] || '（name取得失敗）';
    const targetEmails: string[] = env.TARGET_ADDRESS.split(',').map((email: string) => email.trim());
    const sourceEmail = env.SOURCE_ADDRESS;

    const params = {
      Destination: {
        ToAddresses: targetEmails
      },
      Message: {
        Body: {
          Text: {
            Data: `新規ユーザがサインアップしました。

【ユーザ情報】
Eメールアドレス: ${email}
名前: ${name}
ユーザーID: ${event.userName}
`,
          },
        },
        Subject: {
          Data: '新規ユーザサインアップ通知',
        },
      },
      Source: sourceEmail,
    };

    await sesClient.send(new SendEmailCommand(params));
  } catch (error) {
    console.error('エラーが発生しました:', error);
  }

  return event;
};

import { defineAuth } from '@aws-amplify/backend';
+ import { postConfirmation } from './post-confirmation/resource';

/**
 * Define and configure your auth resource
 * @see https://docs.amplify.aws/gen2/build-a-backend/auth
 */
export const auth = defineAuth({
  loginWith: {
    email: true,
  },
+   triggers: {
+     postConfirmation
+   },
+   // https://docs.amplify.aws/react/build-a-backend/auth/concepts/user-attributes/
+   userAttributes: {
+     // Maps to Cognito standard attribute 'name'
+     fullname: {
+       mutable: true,
+       required: true,
+     },
+   }
});

$ npm run dev

import { defineBackend } from '@aws-amplify/backend';
import { auth } from './auth/resource';
import { data } from './data/resource';
+ import { postConfirmation } from "./auth/post-confirmation/resource"
+ import * as iam from "aws-cdk-lib/aws-iam"

- defineBackend({
+ const backend = defineBackend({
  auth,
  data,
+   postConfirmation
});

+ const statement = new iam.PolicyStatement({
+   actions: ["ses:SendEmail", "ses:SendRawEmail"],
+   effect: iam.Effect.ALLOW,
+   resources: ["*"],
+ })

+ const postConfirmationLambda = backend.postConfirmation.resources.lambda
+ postConfirmationLambda.addToRolePolicy(statement);