restrict policy to the created domain identity

silinternational · Jun 21, 2024 · b101002 · b101002
1 parent bc336d3
commit b101002
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -129,7 +129,7 @@ resource "aws_iam_user_policy" "smtp" {
             "ses:sendEmail",
             "ses:sendRawEmail",
           ]
-          Resource = "*",
+          Resource = aws_ses_domain_identity.this.arn,
           Condition = {
             StringEquals = {
               "ses:FromAddress" = var.email_from_address