How to Configure AWS SES
Published: 2023-01-12 10:48:25

Amazon Simple Email Service (SES) is a cost-effective email service built on the reliable and scalable infrastructure that Amazon.com developed to serve its own customer base. With Amazon SES, you can send transactional email, marketing messages, or any other type of high-quality content to your customers. for businesses of all sizes 
to keep in contact with their customers through email.

**Step:** 
-  Go to AWS Console → Search SES → Click on the Amazon Simple Email Service option.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/n3istuxy29qp1n7omnlt.PNG)
- Get started by creating and verifying a sender identity domain or email address you use to send email  %}through Amazon SES. Click on the “Create Identity“ button.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/m6b4lvir91nizh4628td.PNG)

- To verify identity, need to select the “Domain“ OR the “Email Address“

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/7i5uzjnl4ghqb2ktqp2c.PNG)

-  Select the Domain option and fill up details as per the requirements.
• Enter the domain name. If require a subdomain from your domain for mail click on the “Use a custom MAIL FROM the domain“ checkbox.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/vz40304owr0g591h6mll.PNG)

-  Now, in Verifying your domain section, we need to choose any of one DKIM (Domain Keys Identified Mail) verification method to verify your domain. Domain Keys Identified Mail (DKIM) is an email authentication method that Amazon SES uses to verify domain ownership and that receiving mail servers use to validate email authenticity. You must configure DKIM as part of the domain verification process

- configure the signing key length of the private key as follows:

**1. Easy DKIM** - either accept the Amazon SES default of 2048 bits or override it by selecting 1024 bits.

**2. BYODKIM** - private key length must be at least 1024 bits and up to 2048-bits

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/whrq8pz0dvur0a77v519.png)

- Select the Easy DKIM verification method and select DKIM signing key length as per the requirements. For Publish DNS records to Route53, click on Enabled so Amazon SES will automatically publish the required CNAME records to your domain's DNS settings in Route53 if your domain is registered

- You can add one or more Tags for filter purposes and then click on the “Create Identity“ button.

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/yrknj9ykdesrug7ruwyr.png)

- AWS SES automatically publishes the required CNAME records to your domain's DNS settings in Route53. Go to AWS Console → Search Route 53 → Click on Route 53 option → Go to HostedZone → Select your domain name → See records

After all, the configuration is done, It can take a few minutes or hours for changes to DNS settings to propagate. As soon as Amazon SES detects all of the required DKIM records in your domain’s DNS settings, the verification process is complete. Your domain’s DKIM configuration

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/zoapnz80ngchyst71j11.png)

![Image description](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/kzcbr061h2sc55yqkft4.png)

**Ref:**

1. https://docs.aws.amazon.com/ses/latest/dg/creating-configuration-sets.html

-