AWS SES: DNS Configuration Guide for SPF, DKIM, and MX Records


Step 1: Verify Your Domain in SES

  1. Go to the SES Console → identities.

  2. Click Create Identity.

  3. Enter your domain name

  4. Enable: Use a custom MAIL FROM domain:

  5. Add any subdomain.

  6. Use RSA_2048_BIT DKIM key Length.

  7. Click Create Identity.

➡️ SES will provide a set of DNS records:

  • 3 DKIM CNAME records: Add all the records to your DNS.


Step 2: Add SPF Record (for Root Domain)


In your DNS provider, add a TXT record for the root domain:

Name (Host)TypeValue
    @ TXT"v=spf1 include:amazonses.com -all"


➡️ This authorizes AWS SES to send on behalf of your domain.



Step 3: SES will provide 2 DNS records to add:

  • MX record

  • TXT (SPF) record

Example:

NameTypeValue
events.neuailes.ioMX10 feedback-smtp.<region>.amazonses.com.
events.neuailes.ioTXT"v=spf1 include:amazonses.com -all"

Make sure to replace <region> with your actual SES region (e.g., ap-south-1).


Step 4: Test and Verify

  1. Wait for DNS propagation (usually 5–15 mins).

  2. In SES, click "Verify" next to MAIL FROM and DKIM settings.

  3. Send a test email to a Gmail address and check headers.