EC2 outbound ports for SES, SNS, Cloudwatch

I have an EC2 running Node.js. Using the aws-sdk + winston-cloudwatch + nodemailer dependencies, I am using AWS SES, SNS, and Cloudwatch.

In my EC2 security group, my outbound is currently setup for All-traffic; however, I would limit them to a few ports required for the services mentioned above.

What outbound ports in my EC2 security group do I need to enable to use the following AWS services: SES SNS Cloudwatch?

Thanks!