AWS SES user API configuration error

Question

Hi all, I am trying to configure my AWS SES account with an email-sending platform via API configuration by adding an access key and secret key, it is throwing me the below error, I have added all the relevant permissions required to the access key yet encountering this, please help. Error statement - Error executing "GetUser" on "https://iam.amazonaws.com"; AWS HTTP error: Client error: `POST https://iam.amazonaws.com` resulted in a `403 Forbidden` response: Sender

SignatureD (truncated...) SignatureDoesNotMatch (client): The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details. -   Sender SignatureDoesNotMatch The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.  5291421c-c10d-493e-b958-21f600b3fd44 "

Answer

The 554 Access denied error occurs when the IAM user does not have the necessary permissions to send emails using Amazon SES. A few things you can check:

Make sure the IAM user has the required IAM permissions. At minimum they need the 
ses:SendEmail
 or 
ses:SendRawEmail
 actions.

Check if a sending authorization policy is attached to the email identity or domain. This can block the IAM user from sending.

Verify the Resource element in the IAM policy matches the Amazon Resource Name (ARN) of the email identity.

Check for any restrictive Organizations service control policies (SCPs) attached to the IAM user or account.

You can also try creating a new IAM user specifically for Amazon SES and attach the 
AmazonSESFullAccess
 managed policy. Then generate a new access key for this user and use it to send emails.

AWS SES user API configuration error

Relevant content