How to add SES permission to LambdaExecutionRole

I want to add SES permission to the LambdaExecutionRole so that I can send emails. I want to allow my Lambda Function to be able to use SES.

I also think it would make sense to have a feature like amplify [add|update|remove] ses

[jkervine]

Not sure if it’s relevant to others but I think the current facility we have is pretty decent for me, for this use case, making SES work from lambda. Just edit the function/name/src/custom-policies.json and add:

[
  {
    "Action": [
      "ses:SendEmail",
      "ses:SendRawEmail"
    ],
    "Resource": ["*"]
  }
]

(Obviously have something better than * as resource). Make sure that this file is in version control so that you can manually revert it back in case something overwrites it. I don’t think basic amplify function update touches this file though?

[kaustavghosh06]

I’m marking this as an enhancement for the CLI to provide a way to specify custom policies for a function so that it doesn’t get overwritten on a next amplify update function.