# SES Resource not added in created iAM role for Lambda functions, iamRoleStatements

**URL:** <https://forum.serverless.com/t/ses-resource-not-added-in-created-iam-role-for-lambda-functions-iamrolestatements/5722>\
**Category:** Serverless Framework\
**Created:** [September 8, 2018, 9:49am UTC](https://forum.serverless.com/t/ses-resource-not-added-in-created-iam-role-for-lambda-functions-iamrolestatements/5722 "2018-09-08T09:49:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![avaneesh92](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@avaneesh92](https://forum.serverless.com/u/avaneesh92)\
**Post date:** [September 8, 2018, 9:49am UTC](https://forum.serverless.com/t/ses-resource-not-added-in-created-iam-role-for-lambda-functions-iamrolestatements/5722/1 "2018-09-08T09:49:30Z")

</div>

I have iamRoleStatements section in my serverless.yml as

> ```
> iamRoleStatements:
> - Effect: Allow
> Action:
> - ses:SendEmail
> - ses:SendRawEmail
> - dynamodb:*
> Resource: 
> - "arn:aws:dynamodb:${self:provider.region}:*:table/*"
> - "arn:aws:ses:${self:provider.region}:*:*"
> 
> ```

Generated role for lambda function does not include “arn:aws:ses:${self:provider.region}:_:_” resource in generated role on IAM.  
I have looked in cloud formation template generated by serverless and this is missing there as well

template policy under **IamRoleLambdaExecution** is as follows

> ```
> {
> "Effect": "Allow",
> "Action": [
> "ses:SendEmail",
> "ses:SendRawEmail",
> "dynamodb:*"
> ],
> "Resource": [
> "arn:aws:dynamodb:us-east-1:*:table/*"
> ]
> }
> 
> ```

Am I doing something wrong here?. If I add this resource manually from aws web interface it works fine . serverless seems to ignore it while generating role for lambda function.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![avaneesh92](https://avatars.discourse-cdn.com/v4/letter/a/b5ac83/32.png) [@avaneesh92](https://forum.serverless.com/u/avaneesh92)\
**Post date:** [September 8, 2018, 10:04am UTC](https://forum.serverless.com/t/ses-resource-not-added-in-created-iam-role-for-lambda-functions-iamrolestatements/5722/2 "2018-09-08T10:04:04Z")

</div>

Never mind, it works. I had a typo in my serverless.yml. Above given code works
