CDK Custom Resource Policy for SES Email Identity

cdk-ses-identity-policy.js

// Creating custom policy for CustomResource due to CDK bug (uses email: instead of ses: when creating actions)
const sesPolicy = new PolicyStatement({
    actions: [
        'ses:CreateConfigurationSet',
        'ses:DeleteConfigurationSet',
        'ses:CreateConfigurationSetEventDestination',
        'ses:DeleteConfigurationSetEventDestination',
        'ses:CreateEmailIdentity',
        'ses:DeleteEmailIdentity',
    ],
    resources: ['*'], // Global is required to Create. Delete could be restricted if required.
    effect: Effect.ALLOW,
});