fix(ses-identity): support exceptional regional dkim domain

Author: posquit0

modules/ses-identity/README.md

@@ -37,6 +37,7 @@ This module creates following resources.
 | [aws_sesv2_email_identity_feedback_attributes.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sesv2_email_identity_feedback_attributes) | resource |
 | [aws_sesv2_email_identity_mail_from_attributes.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sesv2_email_identity_mail_from_attributes) | resource |
 | [aws_sesv2_email_identity_policy.this](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sesv2_email_identity_policy) | resource |
+| [aws_region.current](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/region) | data source |
 
 ## Inputs
 

modules/ses-identity/route53.tf

@@ -4,8 +4,22 @@ locals {
     ? aws_sesv2_email_identity.this.dkim_signing_attributes[0].tokens
     : []
   )
+  # INFO: https://docs.aws.amazon.com/general/latest/gr/ses.html#ses_dkim_domains
+  # - Not all AWS Regions use the default SES DKIM domain, `dkim.amazonses.com`
+  dkim_domains = {
+    "default"        = "dkim.amazonses.com"
+    "af-south-1"     = "dkim.af-south-1.amazonses.com"
+    "ap-southeast-3" = "dkim.ap-southeast-3.amazonses.com"
+    "ap-northeast-3" = "dkim.ap-northeast-3.amazonses.com"
+    "eu-south-1"     = "dkim.eu-south-1.amazonses.com"
+    "il-central-1"   = "dkim.il-central-1.amazonses.com"
+    "us-gov-east-1"  = "dkim.us-gov-east-1.amazonses.com"
+  }
+  dkim_domain = lookup(local.dkim_domains, data.aws_region.current.name, local.dkim_domains["default"])
 }
 
+data "aws_region" "current" {}
+
 
 ###################################################
 # DKIM Verification
@@ -17,7 +31,7 @@ resource "aws_route53_record" "dkim" {
   zone_id = var.dkim.verification.zone_id
   name    = "${local.tokens[count.index]}._domainkey.${aws_sesv2_email_identity.this.email_identity}"
   type    = "CNAME"
-  records = ["${local.tokens[count.index]}.dkim.amazonses.com"]
+  records = ["${local.tokens[count.index]}.${local.dkim_domain}"]
 
   ttl             = "600"
   allow_overwrite = true