data "aws_iam_policy_document" "email_sending_only" {
  statement {
    effect = "Allow"

    actions = [
      "ses:SendEmail",
      "ses:SendRawEmail",
    ]

    resources = ["*"]
  }
}

resource "aws_iam_policy" "email_sending_only" {
  name        = "${var.name_prefix}_ses_sending_policy"
  path        = var.path
  description = "Allow Access to Email-Sending Actions Only."
  policy      = data.aws_iam_policy_document.email_sending_only.json
}