Just pointing few security things
1. SES can now be used within the AWS backbone network, without traversing the internet, not needing a NAT gateway, IGW, VPN or even Direct connect. It uses VPC endpoints to keep it even more secure.
2. Two supported ways of initiating a TLS connection – STARTTLS (Port 25, 587 or 2587) or TLS wrapper (STMPS, Port 465, 2465)