From 4493c808b4be63a08f87dbd0ed702236da7a0d04 Mon Sep 17 00:00:00 2001
From: Jesse Brault <jbrault@mac.com>
Date: Tue, 13 Jan 2026 16:14:17 -0600
Subject: [PATCH] Update to iam policy.

---
 lib/lambda/contact/ContactConstruct.ts | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/lib/lambda/contact/ContactConstruct.ts b/lib/lambda/contact/ContactConstruct.ts
index 87a74b4..e7fd3b1 100644
--- a/lib/lambda/contact/ContactConstruct.ts
+++ b/lib/lambda/contact/ContactConstruct.ts
@@ -7,6 +7,7 @@ import {
     LambdaIntegration,
     RestApi
 } from 'aws-cdk-lib/aws-apigateway';
+import { Effect, PolicyStatement } from 'aws-cdk-lib/aws-iam';
 
 export interface ContactConstructProps {
     apiDomainName: IDomainName;
@@ -34,5 +35,13 @@ export class ContactConstruct extends Construct {
         const contactResource =
             contactServiceRestApi.root.addResource('contact');
         contactResource.addMethod('POST', contactIntegration);
+
+        contactLambda.addToRolePolicy(
+            new PolicyStatement({
+                actions: ['ses:SendEmail', 'ses:SendRawEmail'],
+                effect: Effect.ALLOW,
+                resources: ['*']
+            })
+        );
     }
 }