That’s a good point about limiting access to only the specified IP Address NetVicious

You can remove the action “ses:SendEmail”.

If you want to set up more security you can add security by IP address, copying this and adding it inside the first statement just after the Resource.

“Condition”: {
                “IpAddress”: {
                    “aws:SourceIp”: “1.2.3.4/32”
                }
            }