Provide Limited access IAM policy example

[brybeecher]

Is it possible to run the plugin using an iam profile without full access to AWS SES?
If so is there an example policy for this? I've tried limiting the actions permitted but it always results in the plugin failing to send email.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "VisualEditor0",
      "Effect": "Allow",
      "Action": [
        "ses:SendEmail",
        "ses:SendRawEmail"
      ],
      "Resource": "arn:aws:ses:us-west-2:12345:identity/mywebsite.com"
    }
  ]
}