set specific sending limits on SES account

Question

Hello, I want to set a hard limit on how many emails a specific account in my tenant can send within SES per day and/or per month. I have a service that sends out exactly 10 emails a day. This is fixed as specific reporting purposes send emails, Since I know exactly how many will be sent a day, I would like to limit the email count possible if the credentials are leaked or otherwise broken, limiting the damage something like that could cause. Is there a way to perform this?

Riku_Kobayashi · Accepted Answer

I don't think there is any way to restrict yourself from sending email with SES.  
If you want to impose restrictions, you would need to control them on the application side.

dgarcia · Answer

You cannot specify sending limits by IAM, but you can keep track of how many e-mails have been set by an account on CloudWatch and set alarms on usage.

Here you can find how to set this up: https://repost.aws/knowledge-center/ses-iam-user-sent-email

To wrap up:

* Create a configuration Set, as explained on the link.
* Associate this configuration set to ALL identities (NOT EXPLAINED IN THE LINK).
* Build the Chart and Alerts on Cloudwatch, this is very flexible and can setup anything to catter your needs.

kentrad · Answer

You can [set sending limits](https://docs.aws.amazon.com/ses/latest/dg/manage-sending-quotas.html) in SES at the AWS account level.

set specific sending limits on SES account

Add your answer

Relevant content