This repo contains a module for deploying an MTS-STS and TLS-RPT policy for a domin in AWS using Terraform.
This consists of using CloudFront/S3 with a Custom Domain to host the MTA-STS policy, with a TLS certificate provided by AWS ACM. It uses Route53 to configure the DNS portions of both MTA-STS and TLS-RPT.
This module assumes AWS Account with access to Route53, CloudFront, S3, and ACM, which also hosts the DNS (in Route53) for the domain you wish to deploy MTA-STS/TLS-RPT.
module "mtastspolicy_examplecom" {
source = "github.com/ukncsc/terraform-aws-mtasts"
zone_id = "Z00AAAAAAA0A0A"
domain = "example.com"
mx = ["mail.example.com"]
mode = "testing"
reporting_email = "tlsreporting@example.com"
}