Give Edxapp instance s3 and ses permissions.

cloudformation_templates/edx-reference-architecture.json

@@ -2236,7 +2236,25 @@
 										"Action": [ "sts:AssumeRole" ]
 								} ]
             },
-            "Path": "/"
+            "Path": "/",
+            "Policies": [ {
+              "PolicyName": "EdxAppBasePolicy",
+              "PolicyDocument": {
+                "Statement":[
+                  {
+                    "Effect":"Allow",
+                    "Action":[
+                      "cloudformation:DescribeStackResource",
+                      "s3:Put",
+                      "ses:SendEmail",
+                      "ses:SendRawEmail",
+                      "ses:GetSendQuota"
+                    ],
+                    "Resource":"*"
+                  }
+                ]
+              }
+            } ]
         }
     },
 	  "EdxappInstanceProfile": {