Email Component Does not Validate in AWS

[claughinghouse]

When setting up the Email component AWS fails to validate the sender identity when there are ant DMARC overrides and DNS is on Cloudflare. If you run the example that works properly (or comment out the dmarc key, deploy, uncomment on the non working example) below first then add the custom DMARC settings in, there are no issues.

Example that works properly:

export const email = new sst.aws.Email("EmailSes", {
  sender: domain,
  dns: sst.cloudflare.dns(),
});

Example that fails after approx 30 minutes with an error in the AWS console:

export const email = new sst.aws.Email("EmailSes", {
  sender: domain,
  dmarc: "v=DMARC1; p=quarantine; adkim=s; aspf=s;",
  dns: sst.cloudflare.dns(),
});

Link to docs with incorrect example: https://github.com/sst/ion/blob/dev/platform/src/components/aws/email.ts#L103