feat(ses): grant methods to IEmailIdentity

[karaken12]

Issue

Closes #29083

Reason for this change

When granting send email access to a lambda the grant needs to be constructed manually, including constructing the ARN for the identity. e.g.

  Grant.addToPrincipal({
    grantee,
    actions: ["ses:SendEmail"],
    resourceArns: [
      this.stack.formatArn({
        service: 'ses',
        resource: 'identity',
        resourceName: 'test@example.com',
      }),
    ],
    scope: this
  })

This is dissimilar to other constructs, which generally expose a grant method and one or more convenience methods for particularly relevant groups of actions.

Description of changes

Added grant and grantSendEmail to IEmailIdentity, and added a common abstract class, BaseEmailIdentity with the relevant grant code. This is to avoid code duplication between the full EmailIdentity and the Import class.

Description of how you validated changes

Tests added for grants on both new and imported email identities, and a test to validate the grantSendEmail method.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

[kaizencc]

Thanks @karaken12, this looks good!

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

[karaken12]

Thanks @karaken12, this looks good!

Great, thanks! I can still add an integration test if you want?

Pull request has been modified.

[karaken12]

Updated an integration test (as the bot requested!), corrected a documentation error, and updated the list of actions in the grantSendEmail convenience method.

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 9162ae7
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[mergify]

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).