Amazon Simple Email Service
Developer Guide

Setting Up Easy DKIM for a Domain

The procedure in this section shows you how to set up Easy DKIM for a domain that you've already verified with Amazon SES. If you want to set up Easy DKIM for a domain that you haven't verified yet, you have to verify the domain first. For more information about verifying domains, see Verifying Domains in Amazon SES.

To set up Easy DKIM for a domain

  1. In the navigation pane, under Identity Management, choose Domains.

  2. In the list of domains, choose the domain that you want to set up Easy DKIM for.

  3. Under DKIM, choose Generate DKIM Settings.

  4. Copy the three CNAME records that appear in this section. Alternatively, you can choose Download Record Set as CSV to save a copy of the records to your computer.

    The following image shows an example of the DKIM section.

                    The DKIM section of a details page for an identity. Three fictitious CNAME
                        records are shown.
  5. Add the CNAME records to the DNS configuration for your domain. To update the DNS records for your domain:

    • If you use Route 53 as your DNS provider – If you use Route 53 on the same account that you use when you send email using Amazon SES, choose Use Route 53 to automatically update the DNS settings for your domain. Otherwise, complete the procedures shown in Editing Records in the Amazon Route 53 Developer Guide.

    • If you use another DNS provider – Different providers have different procedures for updating DNS records. See the documentation provided by your DNS provider for more information.


      A small number of DNS providers don't allow you to include underscores (_) in record names. However, the underscore in the DKIM record name is required. If your DNS provider doesn't allow you to enter an underscore in the record name, contact the provider's customer support team for assistance.

    • If you're not sure who your DNS provider is – Ask your system administrator for more information.

    Amazon SES usually detects changes to your DNS configuration within 72 hours.