mailmanager not returning all actions

Author: andrewduss-ledgerrunCreated Sep 15, 2026Updated Sep 15, 2026

Labelsbugneeds-triage

Describe the bug

As described in the aws cli reference for mailmanager get-rule-set, the output should include the rules.*.actions.*.write_to_s3.action_failure_policy, but it currently does not. This is causing downstream issues for the terraform provider signaling that there are changes when there are not.

Regression Issue

Select this option if this issue appears to be a regression.

Expected Behavior

The aws mailmanager get-rule-set should return the ActionFailurePolicy with the response

Current Behavior

aws mailmanager get-rule-set responses do not include "WriteToS3": { ActionFailurePolicy: "CONTINUE" }

%aws mailmanager get-rule-set --rule-set-id [REDACTED]
{
    "RuleSetId": "[REDACTED]",
    "RuleSetArn": "[REDACTED]",
    "RuleSetName": "[REDACTED]",
    "CreatedDate": "2026-09-14T13:38:43-07:00",
    "LastModificationDate": "2026-09-14T17:00:05-07:00",
    "Rules": [
        {
            "Name": "[REDACTED]",

            [ ... SNIP ... ]
            
            "Actions": [
                {
                    "WriteToS3": {
                        "RoleArn": "[REDACTED]",
                        "S3Bucket": "[REDACTED]",
                        "S3Prefix": "[REDACTED]"
                    }
                },
                {
                    "SDK_UNKNOWN_MEMBER": {
                        "name": "InvokeLambda"
                    }
                }
            ]
        }
    ]
}

Reproduction Steps

bash

# Create ruleset with S3 ActionFailurePolicy
aws mailmanager create-rule-set \
  --rule-set-name cli-test-action-failure-policy \
  --rules '[{
  "Name": "test-write-to-s3-afp",
  "Actions": [
    {
      "WriteToS3": {
        "RoleArn": "arn:aws:iam::1234567890:role/some-role",
        "S3Bucket": "my-s3-bucket",
        "S3Prefix": "my/prefix/",
        "ActionFailurePolicy": "DROP"
      }
    }
  ]
}]'


# Read back created ruleset
aws mailmanager get-rule-set --rule-set-id <RuleSetId>

Possible Solution

No response

Additional Information/Context

No response

CLI version used

aws-cli/2.33.13 Python/3.13.11 Darwin/25.6.0 exe/arm64

Environment details (OS name and version, etc.)

aws-cli/2.33.13 Python/3.13.11 Darwin/25.6.0 exe/arm64

Source: aws/aws-cli

View original on GitHub View discussion on GitHub