Lambda IAM Policy for Access Advisor and SES

get_iam_client.py

def get_iam_client():
  """
  Get identity and access management client
  """
  return boto3.client('iam')

get_ses_client.py

def get_ses_client():
  """
  Get simple email service client
  """
  return boto3.client('ses')

lambda_access_advisor.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "ses:SendEmail",
                "logs:CreateLogStream",
                "ses:SendRawEmail",
                "iam:GenerateServiceLastAccessedDetails",
                "iam:ListRoles",
                "iam:GetServiceLastAccessedDetails",
                "logs:CreateLogGroup",
                "logs:PutLogEvents"
            ],
            "Resource": "*"
        }
    ]
}