localstack-core 4.6.1.dev60__py3-none-any.whl → 4.10.1.dev12__py3-none-any.whl

localstack/services/secretsmanager/provider.py

@@ -5,7 +5,7 @@ import json
 import logging
 import re
 import time
-from typing import Any, Final, Optional, Union
+from typing import Any, Final
 
 import moto.secretsmanager.exceptions as moto_exception
 from botocore.utils import InvalidArnException
@@ -135,7 +135,7 @@ class SecretsmanagerProvider(SecretsmanagerApi):
         return bool(re.match(r"^[A-Za-z0-9/_+=.@-]+\Z", secret_id))
 
     @staticmethod
-    def _raise_if_invalid_secret_id(secret_id: Union[SecretIdType, NameType]):
+    def _raise_if_invalid_secret_id(secret_id: SecretIdType | NameType):
         # Patches moto's implementation for which secret_ids are not validated, by raising a ValidationException.
         # Skips this check if the secret_id provided appears to be an arn (starting with 'arn:').
         if not re.match(
@@ -149,12 +149,10 @@ class SecretsmanagerProvider(SecretsmanagerApi):
 
     @staticmethod
     def _raise_if_missing_client_req_token(
-        request: Union[
-            CreateSecretRequest,
-            PutSecretValueRequest,
-            RotateSecretRequest,
-            UpdateSecretRequest,
-        ],
+        request: CreateSecretRequest
+        | PutSecretValueRequest
+        | RotateSecretRequest
+        | UpdateSecretRequest,
     ):
         if "ClientRequestToken" not in request:
             raise InvalidRequestException(
@@ -201,8 +199,8 @@ class SecretsmanagerProvider(SecretsmanagerApi):
     ) -> DeleteSecretResponse:
         secret_id: str = request["SecretId"]
         self._raise_if_invalid_secret_id(secret_id)
-        recovery_window_in_days: Optional[int] = request.get("RecoveryWindowInDays")
-        force_delete_without_recovery: Optional[bool] = request.get("ForceDeleteWithoutRecovery")
+        recovery_window_in_days: int | None = request.get("RecoveryWindowInDays")
+        force_delete_without_recovery: bool | None = request.get("ForceDeleteWithoutRecovery")
 
         backend = SecretsmanagerProvider.get_moto_backend_for_resource(secret_id, context)
         try:
@@ -495,7 +493,7 @@ def moto_smb_get_secret_value(fn, self, secret_id, version_id, version_stage):
 def moto_smb_create_secret(fn, self, name, *args, **kwargs):
     # Creating a secret with a SecretId equal to one that is scheduled for
     # deletion should raise an 'InvalidRequestException'.
-    secret: Optional[FakeSecret] = self.secrets.get(name)
+    secret: FakeSecret | None = self.secrets.get(name)
     if secret is not None and secret.deleted_date is not None:
         raise InvalidRequestException(AWS_INVALID_REQUEST_MESSAGE_CREATE_WITH_SCHEDULED_DELETION)
 
@@ -523,7 +521,7 @@ def moto_smb_list_secret_version_ids(
     secret = self.secrets[secret_id]
 
     # Patch: output format, report exact createdate instead of current time.
-    versions: list[SecretVersionsListEntry] = list()
+    versions: list[SecretVersionsListEntry] = []
     for version_id, version in secret.versions.items():
         version_stages = version["version_stages"]
         # Patch: include deprecated versions if include_deprecated is True.

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_resourcepolicy.py

@@ -3,7 +3,7 @@ from __future__ import annotations
 
 import json
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -15,10 +15,10 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SecretsManagerResourcePolicyProperties(TypedDict):
-    ResourcePolicy: Optional[dict]
-    SecretId: Optional[str]
-    BlockPublicPolicy: Optional[bool]
-    Id: Optional[str]
+    ResourcePolicy: dict | None
+    SecretId: str | None
+    BlockPublicPolicy: bool | None
+    Id: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_resourcepolicy_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerResourcePolicyProviderPlugin(CloudFormationResourceProviderP
     name = "AWS::SecretsManager::ResourcePolicy"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_resourcepolicy import (

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_rotationschedule.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,32 +14,32 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SecretsManagerRotationScheduleProperties(TypedDict):
-    SecretId: Optional[str]
-    HostedRotationLambda: Optional[HostedRotationLambda]
-    Id: Optional[str]
-    RotateImmediatelyOnUpdate: Optional[bool]
-    RotationLambdaARN: Optional[str]
-    RotationRules: Optional[RotationRules]
+    SecretId: str | None
+    HostedRotationLambda: HostedRotationLambda | None
+    Id: str | None
+    RotateImmediatelyOnUpdate: bool | None
+    RotationLambdaARN: str | None
+    RotationRules: RotationRules | None
 
 
 class RotationRules(TypedDict):
-    AutomaticallyAfterDays: Optional[int]
-    Duration: Optional[str]
-    ScheduleExpression: Optional[str]
+    AutomaticallyAfterDays: int | None
+    Duration: str | None
+    ScheduleExpression: str | None
 
 
 class HostedRotationLambda(TypedDict):
-    RotationType: Optional[str]
-    ExcludeCharacters: Optional[str]
-    KmsKeyArn: Optional[str]
-    MasterSecretArn: Optional[str]
-    MasterSecretKmsKeyArn: Optional[str]
-    RotationLambdaName: Optional[str]
-    Runtime: Optional[str]
-    SuperuserSecretArn: Optional[str]
-    SuperuserSecretKmsKeyArn: Optional[str]
-    VpcSecurityGroupIds: Optional[str]
-    VpcSubnetIds: Optional[str]
+    RotationType: str | None
+    ExcludeCharacters: str | None
+    KmsKeyArn: str | None
+    MasterSecretArn: str | None
+    MasterSecretKmsKeyArn: str | None
+    RotationLambdaName: str | None
+    Runtime: str | None
+    SuperuserSecretArn: str | None
+    SuperuserSecretKmsKeyArn: str | None
+    VpcSecurityGroupIds: str | None
+    VpcSubnetIds: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_rotationschedule_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerRotationScheduleProviderPlugin(CloudFormationResourceProvide
     name = "AWS::SecretsManager::RotationSchedule"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_rotationschedule import (

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secret.py

@@ -6,7 +6,7 @@ import logging
 import random
 import string
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -20,37 +20,37 @@ LOG = logging.getLogger(__name__)
 
 
 class SecretsManagerSecretProperties(TypedDict):
-    Description: Optional[str]
-    GenerateSecretString: Optional[GenerateSecretString]
-    Id: Optional[str]
-    KmsKeyId: Optional[str]
-    Name: Optional[str]
-    ReplicaRegions: Optional[list[ReplicaRegion]]
-    SecretString: Optional[str]
-    Tags: Optional[list[Tag]]
+    Description: str | None
+    GenerateSecretString: GenerateSecretString | None
+    Id: str | None
+    KmsKeyId: str | None
+    Name: str | None
+    ReplicaRegions: list[ReplicaRegion] | None
+    SecretString: str | None
+    Tags: list[Tag] | None
 
 
 class GenerateSecretString(TypedDict):
-    ExcludeCharacters: Optional[str]
-    ExcludeLowercase: Optional[bool]
-    ExcludeNumbers: Optional[bool]
-    ExcludePunctuation: Optional[bool]
-    ExcludeUppercase: Optional[bool]
-    GenerateStringKey: Optional[str]
-    IncludeSpace: Optional[bool]
-    PasswordLength: Optional[int]
-    RequireEachIncludedType: Optional[bool]
-    SecretStringTemplate: Optional[str]
+    ExcludeCharacters: str | None
+    ExcludeLowercase: bool | None
+    ExcludeNumbers: bool | None
+    ExcludePunctuation: bool | None
+    ExcludeUppercase: bool | None
+    GenerateStringKey: str | None
+    IncludeSpace: bool | None
+    PasswordLength: int | None
+    RequireEachIncludedType: bool | None
+    SecretStringTemplate: str | None
 
 
 class ReplicaRegion(TypedDict):
-    Region: Optional[str]
-    KmsKeyId: Optional[str]
+    Region: str | None
+    KmsKeyId: str | None
 
 
 class Tag(TypedDict):
-    Key: Optional[str]
-    Value: Optional[str]
+    Key: str | None
+    Value: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secret_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerSecretProviderPlugin(CloudFormationResourceProviderPlugin):
     name = "AWS::SecretsManager::Secret"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_secret import (

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secrettargetattachment.py

@@ -2,7 +2,7 @@
 from __future__ import annotations
 
 from pathlib import Path
-from typing import Optional, TypedDict
+from typing import TypedDict
 
 import localstack.services.cloudformation.provider_utils as util
 from localstack.services.cloudformation.resource_provider import (
@@ -14,10 +14,10 @@ from localstack.services.cloudformation.resource_provider import (
 
 
 class SecretsManagerSecretTargetAttachmentProperties(TypedDict):
-    SecretId: Optional[str]
-    TargetId: Optional[str]
-    TargetType: Optional[str]
-    Id: Optional[str]
+    SecretId: str | None
+    TargetId: str | None
+    TargetType: str | None
+    Id: str | None
 
 
 REPEATED_INVOCATION = "repeated_invocation"

localstack/services/secretsmanager/resource_providers/aws_secretsmanager_secrettargetattachment_plugin.py

@@ -1,5 +1,3 @@
-from typing import Optional, Type
-
 from localstack.services.cloudformation.resource_provider import (
     CloudFormationResourceProviderPlugin,
     ResourceProvider,
@@ -10,7 +8,7 @@ class SecretsManagerSecretTargetAttachmentProviderPlugin(CloudFormationResourceP
     name = "AWS::SecretsManager::SecretTargetAttachment"
 
     def __init__(self):
-        self.factory: Optional[Type[ResourceProvider]] = None
+        self.factory: type[ResourceProvider] | None = None
 
     def load(self):
         from localstack.services.secretsmanager.resource_providers.aws_secretsmanager_secrettargetattachment import (

localstack/services/ses/models.py

@@ -1,3 +1,4 @@
+from enum import StrEnum
 from typing import TypedDict
 
 from localstack.aws.api.ses import Address, Destination, Subject, TemplateData, TemplateName
@@ -8,7 +9,7 @@ class SentEmailBody(TypedDict):
     text_part: str
 
 
-class SentEmail(TypedDict):
+class SentEmail(TypedDict, total=False):
     Id: str
     Region: str
     Timestamp: str
@@ -19,3 +20,9 @@ class SentEmail(TypedDict):
     Template: TemplateName
     TemplateData: TemplateData
     Body: SentEmailBody
+
+
+class EmailType(StrEnum):
+    TEMPLATED = "templated"
+    RAW = "raw"
+    EMAIL = "email"

localstack/services/ses/provider.py

@@ -4,8 +4,8 @@ import logging
 import os
 import re
 from collections import defaultdict
-from datetime import date, datetime, time, timezone
-from typing import TYPE_CHECKING, Any, Dict, List, Optional
+from datetime import UTC, date, datetime, time
+from typing import TYPE_CHECKING, Any
 
 from botocore.exceptions import ClientError
 from moto.ses import ses_backends
@@ -26,10 +26,13 @@ from localstack.aws.api.ses import (
     DeleteConfigurationSetResponse,
     DeleteTemplateResponse,
     Destination,
+    Enabled,
     EventDestination,
     EventDestinationDoesNotExistException,
     EventDestinationName,
+    EventType,
     GetIdentityVerificationAttributesResponse,
+    Identity,
     IdentityList,
     IdentityVerificationAttributes,
     InvalidSNSDestinationException,
@@ -40,12 +43,14 @@ from localstack.aws.api.ses import (
     MessageRejected,
     MessageTagList,
     NextToken,
+    NotificationType,
     RawMessage,
     ReceiptRuleSetName,
     SendEmailResponse,
     SendRawEmailResponse,
     SendTemplatedEmailResponse,
     SesApi,
+    SetIdentityHeadersInNotificationsEnabledResponse,
     TemplateData,
     TemplateName,
     VerificationAttributes,
@@ -56,7 +61,7 @@ from localstack.constants import INTERNAL_AWS_SECRET_ACCESS_KEY
 from localstack.http import Resource, Response
 from localstack.services.moto import call_moto
 from localstack.services.plugins import ServiceLifecycleHook
-from localstack.services.ses.models import SentEmail, SentEmailBody
+from localstack.services.ses.models import EmailType, SentEmail, SentEmailBody
 from localstack.utils.aws import arns
 from localstack.utils.files import mkdir
 from localstack.utils.strings import long_uid, to_str
@@ -69,7 +74,7 @@ LOGGER = logging.getLogger(__name__)
 
 # Keep record of all sent emails
 # These can be retrieved via a service endpoint
-EMAILS: Dict[MessageId, Dict[str, Any]] = {}
+EMAILS: dict[MessageId, dict[str, Any]] = {}
 
 # Endpoint to access all the sent emails
 # (relative to LocalStack internal HTTP resources base endpoint)
@@ -112,7 +117,7 @@ def save_for_retrospection(sent_email: SentEmail):
     LOGGER.debug("Email saved at: %s", path)
 
 
-def recipients_from_destination(destination: Destination) -> List[str]:
+def recipients_from_destination(destination: Destination) -> list[str]:
     """Get list of recipient email addresses from a Destination object."""
     return (
         destination.get("ToAddresses", [])
@@ -177,6 +182,8 @@ class SesProvider(SesApi, ServiceLifecycleHook):
     #
 
     def on_after_init(self):
+        self._apply_patches()
+
         # Allow sent emails to be retrieved from the SES emails endpoint
         register_ses_api_resource()
 
@@ -184,7 +191,7 @@ class SesProvider(SesApi, ServiceLifecycleHook):
     # Helpers
     #
 
-    def get_source_from_raw(self, raw_data: str) -> Optional[str]:
+    def get_source_from_raw(self, raw_data: str) -> str | None:
         """Given a raw representation of email, return the source/from field."""
         entities = raw_data.split("\n")
         for entity in entities:
@@ -192,6 +199,12 @@ class SesProvider(SesApi, ServiceLifecycleHook):
                 return entity.replace("From:", "").strip()
         return None
 
+    def _apply_patches(self) -> None:
+        # Suppress Moto's validation of receipt rule actions. These validations use Moto's implementation of S3, Lambda
+        # and SQS, which fail because these services have been internalised in LocalStack.
+        # Besides, AWS does not run the same validations as evidenced by our AWS-validated tests.
+        SESBackend._validate_receipt_rule_actions = lambda *_: None
+
     #
     # Implementations for SES operations
     #
@@ -210,7 +223,9 @@ class SesProvider(SesApi, ServiceLifecycleHook):
             emitter = SNSEmitter(context)
             emitter.emit_create_configuration_set_event_destination_test_message(sns_topic_arn)
 
-        # only register the event destiation if emitting the message worked
+        # FIXME: Moto stores the Event Destinations as a single value when it should be a list
+        #  it only considers the last Event Destination created, when AWS is able to store multiple configurations
+        # only register the event destination if emitting the message worked
         try:
             result = call_moto(context)
         except CommonServiceException as e:
@@ -269,6 +284,9 @@ class SesProvider(SesApi, ServiceLifecycleHook):
             # FIXME: inconsistent state
             LOGGER.warning("inconsistent state encountered in ses backend")
 
+        # FIXME: Moto stores the Event Destinations as a single value when it should be a list
+        #  it only considers the last Event Destination created, when AWS is able to store multiple configurations
+        #  don't pop the whole value which should be a list but is currently a dict
         backend.config_set_event_destination.pop(configuration_set_name)
 
         return DeleteConfigurationSetEventDestinationResponse()
@@ -358,25 +376,21 @@ class SesProvider(SesApi, ServiceLifecycleHook):
         response = call_moto(context)
 
         backend = get_ses_backend(context)
-        emitter = SNSEmitter(context)
-        recipients = recipients_from_destination(destination)
-
-        for event_destination in backend.config_set_event_destination.values():
-            if not event_destination["Enabled"]:
-                continue
-
-            sns_destination_arn = event_destination.get("SNSDestination")
-            if not sns_destination_arn:
-                continue
 
-            payload = SNSPayload(
+        if event_destinations := backend.config_set_event_destination.get(configuration_set_name):
+            recipients = recipients_from_destination(destination)
+            payload = EventDestinationPayload(
                 message_id=response["MessageId"],
                 sender_email=source,
                 destination_addresses=recipients,
                 tags=tags,
             )
-            emitter.emit_send_event(payload, sns_destination_arn)
-            emitter.emit_delivery_event(payload, sns_destination_arn)
+            notify_event_destinations(
+                context=context,
+                event_destinations=event_destinations,
+                payload=payload,
+                email_type=EmailType.EMAIL,
+            )
 
         text_part = message["Body"].get("Text", {}).get("Data")
         html_part = message["Body"].get("Html", {}).get("Data")
@@ -414,25 +428,21 @@ class SesProvider(SesApi, ServiceLifecycleHook):
         response = call_moto(context)
 
         backend = get_ses_backend(context)
-        emitter = SNSEmitter(context)
-        recipients = recipients_from_destination(destination)
-
-        for event_destination in backend.config_set_event_destination.values():
-            if not event_destination["Enabled"]:
-                continue
-
-            sns_destination_arn = event_destination.get("SNSDestination")
-            if not sns_destination_arn:
-                continue
 
-            payload = SNSPayload(
+        if event_destinations := backend.config_set_event_destination.get(configuration_set_name):
+            recipients = recipients_from_destination(destination)
+            payload = EventDestinationPayload(
                 message_id=response["MessageId"],
                 sender_email=source,
                 destination_addresses=recipients,
                 tags=tags,
             )
-            emitter.emit_send_event(payload, sns_destination_arn, emit_source_arn=False)
-            emitter.emit_delivery_event(payload, sns_destination_arn)
+            notify_event_destinations(
+                context=context,
+                event_destinations=event_destinations,
+                payload=payload,
+                email_type=EmailType.TEMPLATED,
+            )
 
         save_for_retrospection(
             SentEmail(
@@ -477,23 +487,19 @@ class SesProvider(SesApi, ServiceLifecycleHook):
         backend = get_ses_backend(context)
         message = backend.send_raw_email(source, destinations, raw_data)
 
-        emitter = SNSEmitter(context)
-        for event_destination in backend.config_set_event_destination.values():
-            if not event_destination["Enabled"]:
-                continue
-
-            sns_destination_arn = event_destination.get("SNSDestination")
-            if not sns_destination_arn:
-                continue
-
-            payload = SNSPayload(
+        if event_destinations := backend.config_set_event_destination.get(configuration_set_name):
+            payload = EventDestinationPayload(
                 message_id=message.id,
                 sender_email=source,
                 destination_addresses=destinations,
                 tags=tags,
             )
-            emitter.emit_send_event(payload, sns_destination_arn)
-            emitter.emit_delivery_event(payload, sns_destination_arn)
+            notify_event_destinations(
+                context=context,
+                event_destinations=event_destinations,
+                payload=payload,
+                email_type=EmailType.RAW,
+            )
 
         save_for_retrospection(
             SentEmail(
@@ -519,18 +525,56 @@ class SesProvider(SesApi, ServiceLifecycleHook):
         backend.create_receipt_rule_set(rule_set_name)
         original_rule_set = backend.describe_receipt_rule_set(original_rule_set_name)
 
-        for rule in original_rule_set:
-            backend.create_receipt_rule(rule_set_name, rule)
+        after = None
+        for rule in original_rule_set.rules:
+            backend.create_receipt_rule(rule_set_name, rule, after)
+            after = rule["Name"]
 
         return CloneReceiptRuleSetResponse()
 
+    @handler("SetIdentityHeadersInNotificationsEnabled")
+    def set_identity_headers_in_notifications_enabled(
+        self,
+        context: RequestContext,
+        identity: Identity,
+        notification_type: NotificationType,
+        enabled: Enabled,
+        **kwargs,
+    ) -> SetIdentityHeadersInNotificationsEnabledResponse:
+        """
+        Sets whether Amazon SES includes the original email headers in the Amazon SNS notifications
+        for a specified identity and notification type.
+        """
+        # Validate notification_type
+        if notification_type not in (
+            NotificationType.Bounce,
+            NotificationType.Complaint,
+            NotificationType.Delivery,
+        ):
+            raise InvalidParameterValue(
+                f"Invalid notification type: {notification_type}. "
+                "Valid values are: Bounce, Complaint, Delivery."
+            )
+
+        backend = get_ses_backend(context)
+        if identity not in backend.email_identities:
+            raise MessageRejected(f"Identity {identity} is not verified or does not exist.")
+
+        # Store the setting in the backend
+        if not hasattr(backend, "identity_headers_in_notifications_enabled"):
+            backend.identity_headers_in_notifications_enabled = {}
+        backend.identity_headers_in_notifications_enabled.setdefault(identity, {})[
+            notification_type
+        ] = enabled
+        return SetIdentityHeadersInNotificationsEnabledResponse()
+
 
 @dataclasses.dataclass(frozen=True)
-class SNSPayload:
+class EventDestinationPayload:
     message_id: str
     sender_email: Address
     destination_addresses: AddressList
-    tags: Optional[MessageTagList]
+    tags: MessageTagList | None
 
 
 class SNSEmitter:
@@ -558,9 +602,9 @@ class SNSEmitter:
         )
 
     def emit_send_event(
-        self, payload: SNSPayload, sns_topic_arn: str, emit_source_arn: bool = True
+        self, payload: EventDestinationPayload, sns_topic_arn: str, emit_source_arn: bool = True
     ):
-        now = datetime.now(tz=timezone.utc)
+        now = datetime.now(tz=UTC)
 
         tags = defaultdict(list)
         for every in payload.tags or []:
@@ -592,10 +636,10 @@ class SNSEmitter:
                 Subject="Amazon SES Email Event Notification",
             )
         except ClientError:
-            LOGGER.exception("sending SNS message")
+            LOGGER.error("sending SNS message", exc_info=LOGGER.isEnabledFor(logging.DEBUG))
 
-    def emit_delivery_event(self, payload: SNSPayload, sns_topic_arn: str):
-        now = datetime.now(tz=timezone.utc)
+    def emit_delivery_event(self, payload: EventDestinationPayload, sns_topic_arn: str):
+        now = datetime.now(tz=UTC)
 
         tags = defaultdict(list)
         for every in payload.tags or []:
@@ -625,7 +669,7 @@ class SNSEmitter:
                 Subject="Amazon SES Email Event Notification",
             )
         except ClientError:
-            LOGGER.exception("sending SNS message")
+            LOGGER.error("sending SNS message", exc_info=LOGGER.isEnabledFor(logging.DEBUG))
 
     @staticmethod
     def _client_for_topic(topic_arn: str) -> "SNSClient":
@@ -640,6 +684,35 @@ class SNSEmitter:
         ).sns
 
 
+def notify_event_destinations(
+    context: RequestContext,
+    # FIXME: Moto stores the Event Destinations as a single value when it should be a list
+    event_destinations: EventDestination | list[EventDestination],
+    payload: EventDestinationPayload,
+    email_type: EmailType,
+):
+    emitter = SNSEmitter(context)
+
+    if not isinstance(event_destinations, list):
+        event_destinations = [event_destinations]
+
+    for event_destination in event_destinations:
+        if not event_destination["Enabled"]:
+            continue
+
+        sns_destination_arn = event_destination.get("SNSDestination", {}).get("TopicARN")
+        if not sns_destination_arn:
+            continue
+
+        matching_event_types = event_destination.get("MatchingEventTypes") or []
+        if EventType.send in matching_event_types:
+            emitter.emit_send_event(
+                payload, sns_destination_arn, emit_source_arn=email_type != EmailType.TEMPLATED
+            )
+        if EventType.delivery in matching_event_types:
+            emitter.emit_delivery_event(payload, sns_destination_arn)
+
+
 class InvalidParameterValue(CommonServiceException):
     def __init__(self, message=None):
         super().__init__(