What DNS records does Amazon SES need?
3 DKIM CNAME records (provided by SES for email signing), 1 SPF TXT record (v=spf1 include:amazonses.com ~all for sending authorization), and 1 DMARC TXT record (v=DMARC1; p=none for policy). All must be added to your DNS provider.
Verify This Answer
Cross-check this information using these trusted sources:
More FAQs in Setting Up Amazon SES with AWS Domain Verification and SMTP Credentials
Go to SES → Verified identities → Create identity → Domain. SES gives you 3 DKIM CNAME records to add to your DNS provider. Also add SPF (v=spf1 include:amazonses.com ~all) and DMARC records. SES checks automatically verification takes 15-60 minutes.
Go to SES → SMTP Settings → Create SMTP Credentials. An IAM user is created with SMTP permissions. Copy the username and password immediately (password can't be viewed again). SMTP server is email-smtp.us-east-1.amazonaws.com, port 587 for TLS.
New SES accounts are in sandbox mode you can only send emails to verified email addresses. To send to any address, request production access from SES → Account dashboard → Request production access. AWS reviews within 24 hours.
Still have questions?
Browse all our FAQs or reach out to our support team