Menu
Amazon Simple Email Service
Developer Guide

Using Sending Authorization with Amazon SES

You can configure Amazon SES to authorize other users to send emails from addresses or domains that you own (your identities) using their own Amazon SES accounts. This feature, called sending authorization, lets you maintain control over your identities so that you can change or revoke the permissions at any time. For example, if you are a business owner, you can use sending authorization to enable a third party (such as an email marketing company) to send email from a domain you own.

If you want to authorize someone to send emails on your behalf, then you are an identity owner. If you are an identity owner, we recommend that you read the following sections:

If you have been authorized to send emails on behalf of someone else, then you are a delegate sender. If you are a delegate sender, we recommend that you read the following sections:

Note

You can also control access to Amazon SES by using IAM policies. IAM policies constrain what individual IAM users can do, while sending authorization policies constrain how individual verified identities can be used. Further, only sending authorization policies can grant cross-account access. For more information about using IAM policies with Amazon SES, see Controlling Access to Amazon SES.

For technical discussions about various Amazon SES topics, visit the Amazon SES Blog. To browse and post questions, go to the Amazon SES Forum.