VerifyDomainDkim
Returns a set of DKIM tokens for a domain identity.
Important
When you execute the VerifyDomainDkim operation, the domain that you
specify is added to the list of identities that are associated with your account.
This is true even if you haven't already associated the domain with your account by
using the VerifyDomainIdentity operation. However, you can't send email
from the domain until you either successfully verify
it or you successfully set up DKIM for
it.
You use the tokens that are generated by this operation to create CNAME records. When Amazon SES detects that you've added these records to the DNS configuration for a domain, you can start sending email from that domain. You can start sending email even if you haven't added the TXT record provided by the VerifyDomainIdentity operation to the DNS configuration for your domain. All email that you send from the domain is authenticated using DKIM.
To create the CNAME records for DKIM authentication, use the following values:
-
Name: token._domainkey.example.com
-
Type: CNAME
-
Value: token.dkim.amazonses.com
In the preceding example, replace token with one of the tokens that are generated when you execute this operation. Replace example.com with your domain. Repeat this process for each token that's generated by this operation.
You can execute this operation no more than once per second.
Request Parameters
For information about the parameters that are common to all actions, see Common Parameters.
- Domain
-
The name of the domain to be verified for Easy DKIM signing.
Type: String
Required: Yes
Response Elements
The following element is returned by the service.
- DkimTokens.member.N
-
A set of character strings that represent the domain's identity. If the identity is an email address, the tokens represent the domain of that address.
Using these tokens, you need to create DNS CNAME records that point to DKIM public keys that are hosted by Amazon SES. Amazon Web Services eventually detects that you've updated your DNS records. This detection process might take up to 72 hours. After successful detection, Amazon SES is able to DKIM-sign email originating from that domain. (This only applies to domain identities, not email address identities.)
For more information about creating DNS records using DKIM tokens, see the Amazon SES Developer Guide.
Type: Array of strings
Errors
For information about the errors that are common to all actions, see Common Errors.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
