Ansible filter to create AWS SES SMTP password from aws access secret

ses-smtp-password.py

#!/usr/bin/env python
import base64
from Crypto.Hash import HMAC, SHA256

class PasswordEncoder:

	def encode(self, secret):
		signature = self._hmac_sha256(b'SendRawEmail', secret)
		byte_array = self._version_signature(signature)
		return self._base64_encode(byte_array)

	def _hmac_sha256(self, msg, key):
		return HMAC.new(key=key, msg=msg, digestmod=SHA256).digest()

	def _version_signature(self, signature):
		return bytearray(0x02).join(signature)

	def _base64_encode(self, bytes):
		return base64.b64encode(bytes)

	def _print_bytes(self, bytes):
		print(self._base64_encode(bytes))

class FilterModule(object):

    def filters(self):
        return {
            'smtp_password': self._smtp_password
        }

    def _smtp_password(self, aws_access_secret):
        return str(PasswordEncoder().encode(str(aws_access_secret)))

Thanks for this gist. FYI AWS have updated their way of generating SMTP passwords: https://docs.aws.amazon.com/ses/latest/dg/smtp-credentials.html

Updated version: https://gist.github.com/lotyp/e06c709e07f1cd92575a001dc8c0a282