AWS SES (IAM)

aws messaging

Amazon Simple Email Service (SES) is a cloud-based email sending service designed to send marketing, notification, and transactional emails.

Common permissions

ses:GetSendQuotases:ListIdentitiesses:GetAccountses:ListTemplatesses:GetTemplateses:ListRuleSetsses:GetRuleSetses:ListContacts

Least-privilege example

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ses:GetSendQuota",
        "ses:ListIdentities",
        "ses:GetAccount",
        "ses:ListTemplates",
        "ses:GetTemplate",
        "ses:ListRuleSets",
        "ses:GetRuleSet",
        "ses:ListContacts"
      ],
      "Resource": "*"
    }
  ]
}

Warnings

Avoid ses:* — grants full control including creating, updating, and deleting identities, templates, rule sets, and contacts
Avoid ses:DeleteIdentity and ses:DeleteTemplate — can remove verified sending identities or email templates

Resources

AWS referenceservicereference.us-east-1.amazonaws.com/v1/ses/ses.json ↗

API

full doc /v1/iam/ses