SES: add ARN utility for SES identity (#12513)

giograno · web-flow · commit 43ad71bb6845 · 2025-04-11T14:24:43.000+02:00
diff --git a/localstack-core/localstack/testing/pytest/fixtures.py b/localstack-core/localstack/testing/pytest/fixtures.py
@@ -1973,6 +1973,30 @@ def factory(email_address: str) -> None:
         aws_client.ses.delete_identity(Identity=identity)
 
 
+@pytest.fixture
+def setup_sender_email_address(ses_verify_identity):
+    """
+    If the test is running against AWS then assume the email address passed is already
+    verified, and passes the given email address through. Otherwise, it generates one random
+    email address and verify them.
+    """
+
+    def inner(sender_email_address: Optional[str] = None) -> str:
+        if is_aws_cloud():
+            if sender_email_address is None:
+                raise ValueError(
+                    "sender_email_address must be specified to run this test against AWS"
+                )
+        else:
+            # overwrite the given parameters with localstack specific ones
+            sender_email_address = f"sender-{short_uid()}@example.com"
+            ses_verify_identity(sender_email_address)
+
+        return sender_email_address
+
+    return inner
+
+
 @pytest.fixture
 def ec2_create_security_group(aws_client):
     ec2_sgs = []
diff --git a/localstack-core/localstack/utils/aws/arns.py b/localstack-core/localstack/utils/aws/arns.py
@@ -524,6 +524,16 @@ def route53_resolver_query_log_config_arn(id: str, account_id: str, region_name:
     return _resource_arn(id, pattern, account_id=account_id, region_name=region_name)
 
 
+#
+# SES
+#
+
+
+def ses_identity_arn(email: str, account_id: str, region_name: str) -> str:
+    pattern = "arn:%s:ses:%s:%s:identity/%s"
+    return _resource_arn(email, pattern, account_id=account_id, region_name=region_name)
+
+
 #
 # Other ARN related helpers
 #
diff --git a/tests/aws/services/ses/test_ses.py b/tests/aws/services/ses/test_ses.py
@@ -116,30 +116,6 @@ def inner(
     return inner
 
 
-@pytest.fixture
-def setup_sender_email_address(ses_verify_identity):
-    """
-    If the test is running against AWS then assume the email address passed is already
-    verified, and passes the given email address through. Otherwise, it generates one random
-    email address and verify them.
-    """
-
-    def inner(sender_email_address: Optional[str] = None) -> str:
-        if is_aws_cloud():
-            if sender_email_address is None:
-                raise ValueError(
-                    "sender_email_address must be specified to run this test against AWS"
-                )
-        else:
-            # overwrite the given parameters with localstack specific ones
-            sender_email_address = f"sender-{short_uid()}@example.com"
-            ses_verify_identity(sender_email_address)
-
-        return sender_email_address
-
-    return inner
-
-
 @pytest.fixture
 def add_snapshot_transformer_for_sns_event(snapshot):
     def _inner(sender_email, recipient_email, config_set_name):
