Send SES email only from EC2

You can create an authorization policy for the identity you are using to send an email from in SES (e.g., test@example.com). For example, you are attaching an EC2 instance profile to the specific EC2 instance, that EC2 instance assumes the IAM role. You can add the IAM role to the authorization policy to allow sending emails.

• Overview of Amazon SES sending authorization
• Creating a sending authorization policy in Amazon SES
• Policy anatomy