Justification for PowerUserAccess permission in AWS?

[brian1]

I purchased MailWizz yesterday, and have gone through the set up process. I'm setting up the AWS SES credentials, and found that the setup guide (https://www.mailwizz.com/kb/adding-a-new-amazon-ses-delivery-server-web-api/) requires the PowerUserAccess permission. That does not follow the principle of least privilege, and would be huge access to give to any third party application like MailWizz. What is the justification for requiring such a broad permission set?

 

[twisted1919]

I'll paste here what I answered in your email:

Hello,

We recommend PowerUser only because it makes it very easy for other users to get started.
You should be able to go only with sns and ses access.

Best

 

[brian1]

Thanks for the quick reply!

For anyone else that's hesitant to grant the MailWizz IAM user access to PowerUserAccess, these permissions appear to be working just fine for SES setup and for bounce handling:



I tested with the SES bounce test emails (ooto@simulator.amazonses.com, bounce@simulator.amazonses.com, complaint@simulator.amazonses.com) and they all appear to be functioning as expected.