I have ses receive mail and put it directly into an s3 bucket.
Bucket has a notification to topics for creates into the report and forensic subfolders to a sns/sqs that feeds the lambda to process them. Then I can batch them.
Then lifecycle policy on bucket to clean up reports.