Using Sending Authorization with Amazon SES
Amazon Simple Email Service (Amazon SES) enables you to authorize other users to send emails from your identities on your behalf. This feature, called sending authorization, lets you maintain control over your identities so that you can change or revoke the permissions at any time. For example, as a business owner, you might use sending authorization to enable an email marketing company to send marketing emails from an email address under your domain name.
If you want to authorize someone to send emails on your behalf, then you are an identity owner. If you are an identity owner, we recommend that you read the following sections:
If you have been authorized to send emails on behalf of someone else, then you are a delegate sender. If you are a delegate sender, we recommend that you read the following sections:
You can also control access to Amazon SES by using IAM policies. IAM policies constrain what individual IAM users can do, while sending authorization policies constrain how individual verified identities can be used. Further, only sending authorization policies can grant cross-account access. For more information about using IAM policies with Amazon SES, see Controlling Access to Amazon SES.