Amazon Simple Email Service v2 (sesv2)

Additions

Actions

• CreateTenant
  
  • Description:  Grants permission to create a new tenant
  • Access:  Write
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateTenantResourceAssociation
  
  • Description:  Grants permission to associate a SES resource to a tenant
  • Access:  Write
  • Resources: 

    Name: configuration-set

    Required: Yes

    Name: identity

    Required: Yes

    Name: template

    Required: Yes

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeleteTenant
  
  • Description:  Grants permission to delete a tenant
  • Access:  Write
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• DeleteTenantResourceAssociation
  
  • Description:  Grants permission to remove an associated SES resource from a tenant
  • Access:  Write
  • Resources: 

    Name: configuration-set

    Required: Yes

    Name: identity

    Required: Yes

    Name: template

    Required: Yes

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• GetReputationEntity
  
  • Description:  Grants permission to retrieve information about a reputation entity's status
  • Access:  Read
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• GetTenant
  
  • Description:  Grants permission to get information about a tenant
  • Access:  Read
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• ListReputationEntities
  
  • Description:  Grants permission to retrieve a list of reputation entities
  • Access:  List
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• ListResourceTenants
  
  • Description:  Grants permission to list all the tenants associated to a SES resource
  • Access:  List
  • Resources: 

    Name: configuration-set

    Required: Yes

    Name: identity

    Required: Yes

    Name: template

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• ListTenantResources
  
  • Description:  Grants permission to list all the resources associated to a tenant
  • Access:  List
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• ListTenants
  
  • Description:  Grants permission to list all the tenants for your account
  • Access:  List
  • Conditions: 

    ses:ApiVersion

• UpdateReputationEntityCustomerManagedStatus
  
  • Description:  Grants permission to update the customer-managed sending status
  • Access:  Write
  • Resources: 

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

• UpdateReputationEntityPolicy
  
  • Description:  Grants permission to assign a reputation policy
  • Access:  Write
  • Resources: 

    Name: reputation-policy

    Required: Yes

    Name: tenant

    Required: Yes

  • Conditions: 

    ses:ApiVersion

    aws:ResourceTag/${TagKey}

Resources

• reputation-policy
  
  • Arn:  arn:${Partition}:ses:${Region}:aws:reputation-policy/${ReputationPolicyName}
• tenant
  
  • Arn:  arn:${Partition}:ses:${Region}:${Account}:tenant/${TenantName}/${TenantId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• ses:TenantName
  
  • Description:  Filters access by the tenant name that is used to send email
  • Type:  String

Updates

Actions

• PutConfigurationSetReputationOptions
  
  Resources
  
  • ＋ tenant
• UpdateEmailIdentityPolicy
  
  Conditions
  
  • ＋ ses:TenantName