set specific sending limits on SES account

Question

Hello, I want to set a hard limit on how many emails a specific account in my tenant can send within SES per day and/or per month. I have a service that sends out exactly 10 emails a day. This is fixed as specific reporting purposes send emails, Since I know exactly how many will be sent a day, I would like to limit the email count possible if the credentials are leaked or otherwise broken, limiting the damage something like that could cause. Is there a way to perform this?

Accepted Answer

I don't think there is any way to restrict yourself from sending email with SES.  
If you want to impose restrictions, you would need to control them on the application side.

Answer

Amazon SES includes [an API that you can use to pause your account's ability to send email](https://docs.aws.amazon.com/ses/latest/dg/monitoring-sender-reputation-pausing-account.html). You can trigger this API operation using a Lambda function that is triggered by [a CloudWatch alarm](https://docs.aws.amazon.com/ses/latest/dg/event-publishing-add-event-destination-cloudwatch.html). In this case, you want your CloudWatch alarm to be triggered when a certain number of emails have been sent.

Answer

You cannot specify sending limits by IAM, but you can keep track of how many e-mails have been set by an account on CloudWatch and set alarms on usage.

Here you can find how to set this up: https://repost.aws/knowledge-center/ses-iam-user-sent-email

To wrap up:

* Create a configuration Set, as explained on the link.
* Associate this configuration set to ALL identities (NOT EXPLAINED IN THE LINK).
* Build the Chart and Alerts on Cloudwatch, this is very flexible and can setup anything to catter your needs.

Answer

You can [set sending limits](https://docs.aws.amazon.com/ses/latest/dg/manage-sending-quotas.html) in SES at the AWS account level.

set specific sending limits on SES account

Relevant content