100% Client-Side EngineZero data storage • No email signup required • 2026 Google & Yahoo Bulk Sender Compliant
DMARCPro
Support Project
Cloud Email Infrastructure 2026 Google & Yahoo Compliant

Amazon SES (Simple Email Service) SPF & DMARC Setup Guide

Amazon SES provides highly reliable, ultra-cost-effective email infrastructure. To achieve 100% DMARC pass rates with Amazon SES, configuring a Custom MAIL FROM domain is strictly required.

View Official Amazon SES (Simple Email Service) Documentation
Cloud Email InfrastructureRFC 7208 & RFC 7489 Validated

Amazon SES (Simple Email Service) DNS Preset Generator

Enter your domain below to customize the exact SPF and DMARC TXT records required for Amazon SES (Simple Email Service).

RFC 7208 DNS Lookup Cost1 of 10 Lookups

1 direct Amazon SES relay query. By default, Amazon SES sends using a shared amazonses.com MAIL FROM domain which fails DMARC SPF alignment. You MUST set up a custom subdomain (e.g. mail.yourdomain.com) in AWS.

Lookup Budget1/10
RECORD 1: SPFHost: @ (or apex domain)Type: TXT
v=spf1 include:amazonses.com ~all

⚠️ Important: If your domain already publishes an existing SPF record, merge include:amazonses.com into that record. Never publish two separate SPF records.

RECORD 2: DMARCHost: _dmarc (or _dmarc.example.com)Type: TXT
v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@example.com; pct=100; adkim=r; aspf=r

This policy enforces p=quarantine (suspicious emails routed to spam) and directs daily XML compliance reports to dmarc-reports@example.com.

Live DNS Propagation Check for example.com

Query Cloudflare DNS-over-HTTPS in real-time to check if your domain already publishes valid records.

Using Amazon SES (Simple Email Service) alongside other platforms?Open Multi-Provider SPF Merger & Lookup Calculator
Step-by-Step Instructions

How to configure Amazon SES (Simple Email Service) in your DNS

Follow these 4 straightforward steps to publish your authentication records on Cloudflare, GoDaddy, Namecheap, or AWS Route 53.

1

Verify Domain in AWS SES

In the Amazon SES Console, create a new Identity for your domain and enable Easy DKIM (publishes 3 CNAME records).

2

Configure Custom MAIL FROM Domain

Assign a subdomain such as mail.yourdomain.com. AWS will generate an MX record and an SPF TXT record specifically for this subdomain.

v=spf1 include:amazonses.com ~all
3

Root Domain Fallback Include (Optional)

If also sending directly from apex domain, add include:amazonses.com to your root SPF record.

v=spf1 include:amazonses.com ~all
4

Enforce DMARC Policy

Publish your _dmarc TXT record with aggregate reporting.

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; pct=100
Technical Q&A

Frequently Asked Questions for Amazon SES (Simple Email Service)

Technical answers regarding lookup limits, multiple records, and delivery errors.

Why does Amazon SES fail SPF alignment without a custom MAIL FROM?▼
DMARC requires the domain in the "From" header to match the domain in the "Return-Path" (MAIL FROM). By default, SES uses bounces.amazonses.com, causing SPF alignment to fail unless a custom subdomain is configured.
How many lookups does amazonses.com use?▼
amazonses.com consumes exactly 1 DNS lookup.
Is DKIM mandatory for Amazon SES in 2026?▼
Yes. AWS Easy DKIM uses 2048-bit keys and passes DMARC alignment automatically, ensuring compliance with Google and Yahoo sender standards.

Common Providers Used with Amazon SES (Simple Email Service)

Send marketing and transactional emails alongside your corporate inbox.

View All 50+ Guides
Transactional Email API1 lookup

Twilio SendGrid

High-Volume Transactional & Marketing Email API

Transactional Email Delivery1 lookup

Postmark

Lightning-Fast Transactional Email with Dedicated Streams

Transactional Email API1 lookup

Mailgun

Developer-First Email API & Verification Platform

Business Email Suite4 lookups

Google Workspace (Gmail)

Official Business Gmail & Google Cloud Email

Full Email Deliverability Suite

Need to combine multiple providers into one SPF record?

Our full in-browser engine merges SPF records, calculates RFC 7208 lookups in real-time, and generates custom DMARC policies.

Open SPF Merger ToolDMARC Policy Generator