skills.rest
aws
awsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

amazon-ses

Configures Amazon SES V2 domain identities with DKIM, SPF, and DMARC authentication.

2.5k|282|Updated Apr 23, 2026
Search Tags:#dns#aws cli#spf#dkim#dmarc#email authentication#amazon ses
One-click install
npx skills add https://github.com/aws/agent-toolkit-for-aws --skill amazon-ses
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: amazon-ses
Source: https://github.com/aws/agent-toolkit-for-aws/tree/main/skills/specialized-skills/messaging-and-streaming-skills/amazon-ses
Command: npx skills add https://github.com/aws/agent-toolkit-for-aws --skill amazon-ses

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Setting up Amazon SES for production email sending requires correctly configuring domain identities, DKIM signing, custom MAIL FROM subdomains, and DMARC records — a process that trips up developers unfamiliar with email authentication and often leads to failed verification or deliverability problems.

Core Features & Use Cases

  • Domain Identity Setup: Creates SES V2 domain identities with Easy DKIM (2048-bit RSA) and checks existing identity state before making changes.
  • Complete DNS Record Generation: Presents all DKIM CNAME, MAIL FROM MX/SPF, and DMARC TXT records in a single batch, with optional Route 53 automation after explicit user confirmation.
  • DKIM Troubleshooting: Diagnoses DKIM stuck in PENDING or FAILED states by verifying DNS propagation and forcing re-verification when needed.
  • Use Case: A developer needs to send transactional email from example.com. The skill creates the domain identity, asks for a preferred MAIL FROM subdomain, generates all six DNS records at once, and verifies propagation until SES reports SUCCESS.

Quick Start

Set up Amazon SES to send email from my domain example.com with full DKIM, SPF, and DMARC authentication.

Frequently Asked Questions about amazon-ses

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up Amazon SES to send email from my domain?▼

Create a domain identity with aws sesv2 create-email-identity, which enables Easy DKIM by default. Then configure a custom MAIL FROM subdomain and add the generated DKIM CNAME, MX, SPF, and DMARC records to your DNS provider.

How to fix DKIM stuck in PENDING status in Amazon SES?▼

Verify each DKIM CNAME record resolves to {token}.dkim.amazonses.com using dig. Common causes include DNS providers appending the domain twice, records in a non-authoritative hosted zone, or wildcard CNAME conflicts. SES re-polls automatically, so correct records typically verify within minutes.

Does Amazon SES support automatic DNS setup with Route 53?▼

Yes, if Route 53 hosts the domain, the workflow can create all DKIM, MAIL FROM, and DMARC records via aws route53 change-resource-record-sets. It first checks the hosted zone is authoritative and requires explicit user permission before modifying DNS.

What DNS records are needed for Amazon SES domain verification?▼

You need three DKIM CNAME records, an MX and SPF TXT record for the custom MAIL FROM subdomain, and a DMARC TXT record at _dmarc.yourdomain. All records should be added together in one batch for fastest verification.

When should I not use this SES domain setup workflow?▼

This workflow is for domain-identity production sending only. It does not cover email-address-only verification, Mail Manager inbound routing, SNS, Pinpoint, or WorkMail scenarios.

Related Skills

Explore More Software Engineering Skills→
different-aidifferent-ai
249

aws-ses-inbound

Configure AWS SES inbound email forwarding to an HTTPS webhook via SNS.

Official
Advanced
imaginationeverywhereimaginationeverywhere

email-notifications-standard

Send transactional and marketing emails via AWS SES with templates.

Official
Advanced
chunkydotdevchunkydotdev
2

sender-reputation

Diagnose email sender reputation issues and create recovery plans.

Community
Advanced
sinchsinch
9

sinch-mailgun

Authenticate and manage Mailgun API workflows for transactional email delivery and tracking.

Official
Advanced