Using sending authorization with Amazon SES - Amazon Simple Email Service Classic

This is the user guide for Amazon SES Classic. Updates and new features are only being documented in the new Amazon SES Developer Guide which we recommend to use.

Using sending authorization with Amazon SES

You can configure Amazon SES to authorize other users to send emails from addresses or domains that you own (your identities) using their own Amazon SES accounts. This feature, called sending authorization, lets you maintain control over your identities so that you can change or revoke the permissions at any time. For example, if you are a business owner, you can use sending authorization to enable a third party (such as an email marketing company) to send email from a domain you own.

If you want to authorize someone to send emails on your behalf, then you are an identity owner. If you are an identity owner, we recommend that you read the following sections:

If you have been authorized to send emails on behalf of someone else, then you are a delegate sender. If you are a delegate sender, we recommend that you read the following sections:


You can also control access to Amazon SES by using IAM policies. IAM policies constrain what individual IAM users can do, while sending authorization policies constrain how individual verified identities can be used. Further, only sending authorization policies can grant cross-account access. For more information about using IAM policies with Amazon SES, see Controlling access to Amazon SES.

For information and discussions about a variety of topics related to Amazon SES, see the AWS Messaging and Targeting Blog. To browse and post questions, go to the Amazon SES Forum.