diff --git a/ses-domain/policies.tf b/ses-domain/policies.tf
index a3f5b6d..bc43991 100644
--- a/ses-domain/policies.tf
+++ b/ses-domain/policies.tf
@@ -9,7 +9,7 @@ data "aws_iam_policy_document" "ses_event" {
       "kms:GenerateDataKey*",
       "kms:Decrypt",
     ]
-    resources = [aws_kms_alias.sns.arn]
+    resources = [data.aws_kms_alias.sns.arn]
     principals {
       type        = "Service"
       identifiers = ["ses.amazonaws.com"]