fix: Add missing IAM SES permissions

apptension · Jul 5, 2024 · 684b37b · 684b37b
1 parent 2056b03
commit 684b37b
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/packages/backend/infra/stacks/lib/backendTaskRole.ts b/packages/backend/infra/stacks/lib/backendTaskRole.ts
@@ -87,5 +87,12 @@ export function createBackendTaskRole(
     }),
   );
 
+  taskRole.addToPolicy(
+    new iam.PolicyStatement({
+      actions: ['ses:SendEmail', 'ses:SendRawEmail', 'ses:GetSendQuota'],
+      resources: ['*'],
+    }),
+  );
+
   return taskRole;
 }
diff --git a/packages/workers/workers.conf.yml b/packages/workers/workers.conf.yml
@@ -12,10 +12,6 @@ iam:
       - "secretsmanager:*"
     Resource:
       { Fn::ImportValue: "${self:custom.projectEnvName}-databaseSecretArn" }
-  - Effect: "Allow"
-    Action:
-      - "ses:SendEmail"
-    Resource: "*"
   - Effect: "Allow"
     Action:
       - "states:StartExecution"