Sending notifications

To send emails securely from member accounts in an AWS Organization to registered email addresses:

1. Set up AWS SES in the management account.

2. Create an IAM role in the management account with SES send permissions.

3. Allow member accounts to assume this role.

4. In member accounts, set up a scheduler (e.g., EventBridge) to trigger a Lambda function that:

   • Assumes the SES role from the management account
   • Uses the assumed credentials to send emails via SES

This approach centralizes email sending, maintains security, and avoids exposing sensitive information.

For more details:

• AWS SES Cross-Account Access
• AWS Organizations Security