Amazon SES requires that you verify your email address or domain of your business, to confirm that you own it and to prevent others from using it. When you verify an entire domain, you are verifying all email addresses from that domain, so you don't need to verify email addresses from that domain individually. For example, if you verify the domain example.com, you can send email from user1@example.com, user2@example.com, or any other user at example.com.


You can manage your verified domains by using the Amazon SES console or the Amazon SES API. For a complete description of API actions related to domain verification, go to the Amazon Simple Email Service API Reference.

 

DKIM. When Amazon SES detects that you've added the DKIM records to the DNS configuration for a domain, you can start sending email from that domain, even if you haven't already completed the procedure in this section.


To verify a domain:

  1. Go to your verified domain list in the Amazon SES console, or follow these instructions to navigate to it:
  2. Sign in to the AWS Management Console and open the Amazon SES console athttps://console.aws.amazon.com/ses/.
  3. In the navigation pane, under Identity Management, choose Domains.
  4. Choose Verify a New Domain.
  5. In the Verify a New Domain dialog box, enter the domain name. If you want to set up DKIM signing for this domain, select the Generate DKIM Settings option. (For information about DKIM signing, see Authenticating Email with DKIM in Amazon SES.) Choose Verify This Domain.
  6. In the Verify a New Domain dialog box, you will see a Domain Verification Record Set containing a Name, Type, and a Value. (This information will also be available by choosing the domain name after you close the dialog box.)
  7. To complete domain verification, add a TXT record with the displayed Name and Value to your domain's DNS server. For information about Amazon SES TXT records and general guidance about how to add a TXT record to a DNS server, see Amazon SES Domain Verification TXT Records. In particular:
  8. If your DNS provider does not allow underscores in record names, you can omit _amazonses from the Name.
  9. To help you easily identify this record within your domain's DNS settings, you can optionally prefix the Value with amazonses:
  10. Some DNS providers automatically append the domain name to DNS record names. To avoid duplication of the domain name, you can add a period to the end of the domain name in the DNS record. This indicates that the record name is fully qualified and the DNS provider need not append an additional domain name.
  12. If Route 53 provides the DNS service for the domain that you are verifying, and you are signed in to the AWS Management Console under the same account that you use for Route 53, then Amazon SES will give you the option of updating your DNS server immediately from within the Amazon SES console. If you are not using Route 53, Amazon SES needs to verify that a TXT record with the specified Name and Value have been added to your domain's DNS server. This may take up to 72 hours.
  13. When verification is complete, the domain's status in the Amazon SES console will change from "pending verification" to "verified," and you will receive a confirmation success email from Amazon SES to the email address associated with your AWS account.
  14. You can now use Amazon SES to send email from any address in the verified domain. To send a test email, check the box next to the verified domain, and then choose Send a Test Email.
  15. If the DNS settings are not correctly updated, you will receive a domain verification failure email from Amazon SES, and the domain will display a status of failed on the Domains tab. If this happens, complete the steps on the troubleshooting page at Amazon SES Email Address and Domain Verification Problems. After you verify that your TXT was created correctly, choose the retry link next to the failed status notification to restart the domain verification process.