ses:AllowVendedLogDeliveryForResource

Permissions management

ses:AllowVendedLogDeliveryForResource is a Permissions management access-level action in the ses service. Grants permission to configure vended log delivery for Mail Manager resources

Resource types

ARNs that ses:AllowVendedLogDeliveryForResource can be scoped to in an IAM policy.

arn:${Partition}:ses:${Region}:${Account}:mailmanager-ingress-point/${IngressPointId}

mailmanager-ingress-point

arn:${Partition}:ses:${Region}:${Account}:mailmanager-rule-set/${RuleSetId}

mailmanager-rule-set

Condition keys

Keys you can use in the Condition block of a policy that grants ses:AllowVendedLogDeliveryForResource.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

ses:MailManagerIngressPointType String

Filters access by SES Mail Manager ingress point type, for example OPEN or AUTH

Example IAM policy

A minimal policy that allows ses:AllowVendedLogDeliveryForResource. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSesAllowVendedLogDeliveryForResource",
      "Effect": "Allow",
      "Action": "ses:AllowVendedLogDeliveryForResource",
      "Resource": "*"
    }
  ]
}

Related actions in ses

ses:BatchGetMetricData Read ses:CancelExportJob Write ses:CloneReceiptRuleSet Write ses:CreateAddonInstance Write ses:CreateAddonSubscription Write ses:CreateAddressList Write ses:CreateAddressListImportJob Write ses:CreateArchive Write ses:CreateConfigurationSet Write ses:CreateConfigurationSet Write ses:CreateConfigurationSet Write ses:CreateConfigurationSetEventDestination Write

View all ses actions →