Connect to Amazon Simple Email Service

Sign in to the IAM console with a user that has permissions to create IAM policies. We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the left-side navigation pane, choose Policies.

Choose Create policy.

In the Policy editor section, choose the JSON option.

Type or paste in the following JSON policy document.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "ses:SendEmail",
            "Resource": "*"
        }
    ]
}

Choose Next.

On the Review and create page, provide a Policy name, such as SESForAppStudioPolicy, and Description (optional).

Choose Create policy to create the policy.

Sign in to the IAM console with a user that has permissions to create IAM roles. We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the left-side navigation pane, choose Roles

Choose Create role.

In Trusted entity type, choose Custom trust policy.

Replace the default policy with the following policy to allow App Studio applications to assume this role in your account.

You must replace the following placeholders in the policy. The values to be used can be found in App Studio, in the Account settings page.

{ 
    "Version": "2012-10-17",
    "Statement": [
        { 
            "Effect": "Allow",
            "Principal": { 
                "AWS": "arn:aws:iam::111122223333:root"
            }, 
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                        "aws:PrincipalTag/IsAppStudioAccessRole": "true",
                        "sts:ExternalId": "11111111-2222-3333-4444-555555555555"
                }
            }
        } 
    ]
}

Choose Next.

In Add permissions, search for and select the policy that you created in the previous step (SESForAppStudioPolicy). Choosing the + next to a policy will expand the policy to show the permissions granted by it and choosing the checkbox selects the policy.

Choose Next.

On the Name, review, and create page, provide a Role name and Description.

In Step 3: Add tags, choose Add new tag to add the following tag to provide App Studio access:

Choose Create role and make note of the generated Amazon Resource Name (ARN), you will need it when creating the Amazon SES connector in App Studio.

Navigate to App Studio.

In the left-side navigation pane, choose Connectors in the Manage section. You will be taken to a page displaying a list of existing connectors with some details about each.

Choose + Create connector.

Choose Other AWS Services from the list of connector types.

Configure your connector by filling out the following fields:

Choose Create.

The newly created connector will appear in the Connectors list.