fix(iac): allow regional ses sns principal

kennethaasan · kennethaasan · commit d4b8bcfffec5 · 2025-12-26T22:30:01.000+01:00
diff --git a/iac/main.tf b/iac/main.tf
@@ -257,7 +257,10 @@ data "aws_iam_policy_document" "ses_events" {
 
     principals {
       type        = "Service"
-      identifiers = ["ses.amazonaws.com"]
+      identifiers = [
+        "ses.amazonaws.com",
+        "ses.${local.ses_region}.amazonaws.com",
+      ]
     }
 
     actions   = ["sns:Publish"]
