Merge pull request #84 from lpsinger/update-iam-documentation

Document IAM resource keys for SES configuration set
nasa-gcn · May 8, 2023 · 725ff42 · 725ff42
2 parents d76b8d2 + 50cb0bc
commit 725ff42
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -14,7 +14,7 @@ The following environment variables may be used to configure the service:
 
 ## IAM Policy
 
-The following is the minimum AWS IAM policy to grant the necessary permissions to this service. Replace `<region>` with the AWS region (e.g. `us-east-1`, `<account>` with the AWS account ID, and `<domain>` with the verified SES domain (e.g. `test.gcn.nasa.gov`.))
+The following is the minimum AWS IAM policy to grant the necessary permissions to this service. Replace `<region>` with the AWS region (e.g. `us-east-1`), `<account>` with the AWS account ID, `<domain>` with the verified SES domain (e.g. `test.gcn.nasa.gov`), and `<configuration-set>` with the SES configuration set.
 
 ```json
 {
@@ -25,7 +25,10 @@ The following is the minimum AWS IAM policy to grant the necessary permissions t
                 "ses:SendEmail",
                 "ses:SendRawEmail"
             ],
-            "Resource": "arn:aws:ses:<region>:<account>:identity/<domain>",
+            "Resource": [
+                "arn:aws:ses:<region>:<account>:identity/<domain>",
+                "arn:aws:ses:<region>:<account>:configuration-set/<configuration-set>"
+            ],
             "Effect": "Allow"
         },
         {