opensend/api/iam-policy.json at main · R44VC0RP/opensend · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "DiscoverAccountAndSesIdentities",
      "Effect": "Allow",
      "Action": ["sts:GetCallerIdentity", "ses:GetAccount", "ses:ListEmailIdentities"],
      "Resource": "*"
    },
    {
      "Sid": "ReadSesReputationMetrics",
      "Effect": "Allow",
      "Action": "cloudwatch:GetMetricData",
      "Resource": "*"
    },
    {
      "Sid": "ManageSenderIdentities",
      "Effect": "Allow",
      "Action": [
        "ses:GetEmailIdentity",
        "ses:CreateEmailIdentity",
        "ses:PutEmailIdentityMailFromAttributes"
      ],
      "Resource": "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:identity/*"
    },
    {
      "Sid": "ProvisionOpenSendConfigurationSets",
      "Effect": "Allow",
      "Action": [
        "ses:CreateConfigurationSet",
        "ses:GetConfigurationSet",
        "ses:GetConfigurationSetEventDestinations",
        "ses:CreateConfigurationSetEventDestination",
        "ses:UpdateConfigurationSetEventDestination",
        "ses:PutConfigurationSetSuppressionOptions",
        "ses:TagResource"
      ],
      "Resource": "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:configuration-set/opensend-*"
    },
    {
      "Sid": "SendFromAccountIdentities",
      "Effect": "Allow",
      "Action": ["ses:SendEmail", "ses:SendRawEmail"],
      "Resource": [
        "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:identity/*",
        "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:configuration-set/opensend-*",
        "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:template/*"
      ]
    },
    {
      "Sid": "ApplyPerMessageTracking",
      "Effect": "Allow",
      "Action": "ses:ApplyTrackingConfigurationOverrides",
      "Resource": "*"
    },
    {
      "Sid": "ReadAndRenderStoredTemplates",
      "Effect": "Allow",
      "Action": ["ses:GetEmailTemplate", "ses:TestRenderEmailTemplate"],
      "Resource": "arn:aws:ses:*:YOUR_AWS_ACCOUNT_ID:template/*"
    },
    {
      "Sid": "ManageMailboxReceiptRules",
      "Effect": "Allow",
      "Action": [
        "ses:DescribeActiveReceiptRuleSet",
        "ses:DescribeReceiptRuleSet",
        "ses:CreateReceiptRuleSet",
        "ses:SetActiveReceiptRuleSet",
        "ses:CreateReceiptRule",
        "ses:UpdateReceiptRule",
        "ses:DeleteReceiptRule"
      ],
      "Resource": "*"
    },
    {
      "Sid": "ProvisionMailboxBuckets",
      "Effect": "Allow",
      "Action": [
        "s3:CreateBucket",
        "s3:ListBucket",
        "s3:PutBucketOwnershipControls",
        "s3:PutBucketTagging",
        "s3:PutBucketPublicAccessBlock",
        "s3:PutBucketPolicy",
        "s3:PutLifecycleConfiguration"
      ],
      "Resource": "arn:aws:s3:::opensend-*-mail-*"
    },
    {
      "Sid": "ReadWriteMailboxObjects",
      "Effect": "Allow",
      "Action": ["s3:GetObject", "s3:PutObject", "s3:DeleteObject"],
      "Resource": "arn:aws:s3:::opensend-*-mail-*/*"
    },
    {
      "Sid": "ProvisionOpenSendFeedbackTopics",
      "Effect": "Allow",
      "Action": [
        "sns:CreateTopic",
        "sns:GetTopicAttributes",
        "sns:SetTopicAttributes",
        "sns:ListTagsForResource",
        "sns:TagResource",
        "sns:ListSubscriptionsByTopic",
        "sns:GetSubscriptionAttributes",
        "sns:SetSubscriptionAttributes"
      ],
      "Resource": "arn:aws:sns:*:YOUR_AWS_ACCOUNT_ID:opensend-*"
    },
    {
      "Sid": "SubscribeOpenSendHttpsFeedback",
      "Effect": "Allow",
      "Action": "sns:Subscribe",
      "Resource": "arn:aws:sns:*:YOUR_AWS_ACCOUNT_ID:opensend-*",
      "Condition": {
        "StringEquals": {"sns:Protocol": "https"},
        "StringLike": {"sns:Endpoint": "https://*/v1/events/ses"}
      }
    }
  ]
}