AWS SAM for SQS to Lambda to SES

template.yaml

SendLambda:
  Type: AWS::Serverless::Function
  Properties:
    CodeUri: src/send-mail/
    Description: Polls SQS, builds email, sends to SES
    MemorySize: 256
    Policies:
      - SQSPollerPolicy:
          QueueName: !GetAtt ApiQueue.QueueName
      - SESCrudPolicy:
          IdentityName: !Ref SenderIdentity
    Events:
      SQSEvent:
        Type: SQS
        Properties:
          BatchSize: 1
          Queue: !GetAtt ApiQueue.Arn
    DeadLetterQueue:
      Type: SQS
      TargetArn: !GetAtt ApiQueueDLQ.Arn
    Environment:
      Variables:
        SENDER_EMAIL: !Ref Sender
        SES_CONFIG_SET: !Ref SESConfigSet

# Creating Event destination configuration set
SESConfigSet:
  Type: AWS::SES::ConfigurationSet
  Properties:
    Name: sam-pigeon-event-config

# Lambda function that runs on deploy to configure SES Event Destination
SetupSESLambda:
  Type: AWS::Serverless::Function
  Properties:
    CodeUri: src/setup-ses-config/
    Description: Custom resources to configure SES
    Timeout: 30
    Policies:
    - Statement:
      - Sid: AllowSesConfigEventCrud
        Effect: Allow
        Action:
        - ses:CreateConfigurationSetEventDestination
        - ses:UpdateConfigurationSetEventDestination
        - ses:DeleteConfigurationSetEventDestination
        Resource: "*"

# Config to run the Lambda function above
CustomSESConfigEventDestination:
  Type: Custom::SESConfigurationEventDestination
  Properties:
    ServiceToken: !GetAtt SetupSESLambda.Arn
    ConfigSetEventDestinationName: sam-pigeon-event-sns-config
    ConfigSetName: !Ref SESConfigSet
    SNSTopicArn: !Ref EventsSNS