Creating receipt rules for Amazon SES email receiving - Amazon Simple Email Service Classic

This is the user guide for Amazon SES Classic. Updates and new features are only being documented in the new Amazon SES Developer Guide which we recommend to use.

Creating receipt rules for Amazon SES email receiving

Receipt rules let you specify what Amazon SES does with email it receives for the email addresses or domains you own. A receipt rule contains a condition and an ordered list of actions. If the recipient of an incoming email matches a recipient specified in the conditions for the receipt rule, then Amazon SES performs the actions specified in that receipt rule. For more information about the role of receipt rules in the email-receiving process, see Email receiving concepts.


To set up receipt rules, first verify a domain and publish an MX record on that domain. For more information about verifying domains, see Verifying domains in Amazon SES. For more information about publishing MX records, see Publishing an MX record for Amazon SES email receiving.

You can use the Amazon SES console or the CreateReceiptRule API operation to create receipt rules. This section provides procedures for creating a new receipt rule using the console. These procedures assume that your Amazon SES account does not contain any existing receipt rules.

Setting up a receipt rule

You can use the Amazon SES console or the CreateReceiptRule API to create rules.

To create a receipt rule using the console

  1. Sign in to the AWS Management Console and open the Amazon SES console at

  2. In the left navigation pane, under Email Receiving, choose Rule Sets.

  3. Choose Create a Receipt Rule.

  4. Use the following procedure to add one or more recipients. Collectively, these recipients are the condition. You can have a maximum of 100 recipients per receipt rule.

    1. Under Recipients, specify the incoming email address or domain for which you want to set up a receipt rule. The following table uses the address to show how to specify recipients.

      If you want to... Specify the following recipient... Notes
      Match a specific email address. Also matches variations of the address that contain labels (such as and However, if you specify an address that contains a label, only that specific address is matched.
      Match all addresses within a domain, but not those within its subdomains.
      Match all addresses within a specific subdomain, but not those within the parent domain.
      Match all addresses within all subdomains, but not those within the parent domain. Note the period (.) before the domain name.
      Match all addresses within a domain, and all addresses within all of its subdomains.

      Create two separate recipients: one with the domain name, and one with a period followed by the domain name.
      Match all recipients in all verified domains [None] Leave the recipient field blank.

      If multiple Amazon SES accounts receive email on a common domain (for example, if multiple teams in the same company each have separate Amazon SES accounts), Amazon SES processes all matching receipt rules simultaneously for each of those accounts. This behavior may result in a situation where one account generates a bounce, while another account accepts the email.

      We recommend that you coordinate with other teams in your organization that use Amazon SES to ensure that each account uses unique receipt rules, and that those rules do not overlap. In these situations, it is best to configure your receipt rules to use only email addresses or subdomains that are unique to your group or team.

    2. Choose Add Recipient.

    3. Repeat steps a and b for each recipient you want to add. When you finish adding recipients, choose Next Step.

  5. Use the following procedure to add one or more actions to the receipt rule.

    1. Choose an action from the menu.

    2. Choose the action settings. For information about the options for each action, see Action options.

    3. Add additional actions as needed, and then choose Next Step.

  6. For Rule Details, use the following procedure to choose settings.

    1. For Rule Name, type a name for the receipt rule. The name must contain less than 64 alphanumeric, hyphen (-), underscore (_), and period (.) characters. The name must start and end with a letter or number.

    2. If you want to enable the receipt rule, leave the Enabled option selected.

    3. If you want Amazon SES to reject any incoming emails that are not sent over a connection that is encrypted with Transport Layer Security (TLS), select TLS.

    4. If you want Amazon SES to scan incoming emails for spam and viruses, select Enable Spam and Virus Scanning.

  7. For Rule Set, choose an existing receipt rule set or click Create New Rule Set.

  8. For Rule Position, choose where to place the receipt rule in the ordered list of receipt rules. The receipt rules are evaluated sequentially.

  9. Choose Next Step, and then choose Create Rule.

For information about how to use the CreateReceiptRule API to create rules, see the Amazon Simple Email Service API Reference.