Allow the admin to read s3 and send mail.

cloudformation_templates/edx-admin-reference-architecture.json

@@ -709,7 +709,25 @@
                     "Action": [ "sts:AssumeRole" ]
                 } ]
             },
-            "Path": "/"
+            "Path": "/",
+            "Policies": [ {
+              "PolicyName": "AdminBasePolicy",
+              "PolicyDocument": {
+                "Statement":[
+                  {
+                    "Effect":"Allow",
+                    "Action":[
+                      "s3:Get*",
+                      "s3:List*",
+                      "ses:SendEmail",
+                      "ses:SendRawEmail",
+                      "ses:GetSendQuota"
+                    ],
+                    "Resource":"*"
+                  }
+                ]
+              }
+            } ]
         }
     },
     "AdminInstanceProfile": {