[vittorioexp]

Summary

Closes #618.

Documents the IAM permissions required for EMAIL_TRANSPORT=ses, based on Directus''s current Nodemailer + AWS SES v2 integration:

• ses:SendRawEmail on the verified EMAIL_FROM identity
• health-check note for Nodemailer''s verify() test send from invalid@invalid (or disable via EMAIL_VERIFY_SETUP=false)

Notes

ses:GetAccount from the original report is not documented here — current Nodemailer verify uses SendEmailCommand with invalid@invalid, not GetAccount.

[vercel]

@vittorioexp is attempting to deploy a commit to the Directus Team on Vercel.

A member of the Team first needs to authorize it.

[bryantgillespie]

Thanks! I merged main in (the new Mailtrap section now follows SES) and listed both ses:SendEmail and ses:SendRawEmail, since Directus sends raw content through the SES v2 SendEmail call and AWS docs aren't clear which action it checks.