diff --git a/main.tf b/main.tf
index ec0d146..955b9a6 100644
--- a/main.tf
+++ b/main.tf
@@ -129,7 +129,7 @@ resource "aws_iam_user_policy" "smtp" {
             "ses:sendEmail",
             "ses:sendRawEmail",
           ]
-          Resource = "*",
+          Resource = aws_ses_domain_identity.this.arn,
           Condition = {
             StringEquals = {
               "ses:FromAddress" = var.email_from_address