AWS ses medium security documentation change

Service: ses · 2025-03-05 · Security-related medium

File: ses/latest/dg/eb-policies.md

Summary

Added configuration set requirement note and updated IAM policy resource list

Security assessment

Addresses potential permission misconfiguration by specifying required resources for policies using configuration sets, preventing authorization failures

Diff

diff --git a/ses/latest/dg/eb-policies.md
index 80d907fb0..230a601a4 100644
--- a/ses/latest/dg/eb-policies.md
+++ b/ses/latest/dg/eb-policies.md
@@ -369,0 +370,4 @@ The following policy is required to use the **Send to internet** rule action whi
+###### Note
+
+If your SES identity is using a default configuration set, you'll need to also add the configuration set resource as shown in the following example.
+    
@@ -377 +381,4 @@ The following policy is required to use the **Send to internet** rule action whi
-            "Resource": "arn:aws:ses:us-east-1:888888888888:identity/example.com"
+            "Resource":[
+            "arn:aws:ses:us-east-1:888888888888:identity/example.com",
+            "arn:aws:ses:us-east-1:888888888888:configuration-set/my-configuration-set"
+            ]