EMR EC2 execution role should have access to send email via SES.

[markovarghese]

We have multiple teams who want to use SES to deliver the Datapull reports via email (these reports are already delivered to Cloudwatch as events). For this to happen, the EMR EC2 execution role should have access to send email via SES.

The ideal solution will be to tailor the installation such that these roles get access to send email via SES only if SES is configured. however, until we make the installation UI-driven/dynamic, let's provide this access scoped to DataPull resources alone.