Below is the IAM policy required to limit AmazonSES SMTP sending to IP and hostname { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "ses:SendRawEmail", "Resource": "Amazon_Resource_Name_(ARN)", "Condition": { "IpAddress": { "aws:SourceIp": [ "ENTER.IP.HERE.THANX/32" ] } } } ] }