dmarced

AWS Amazon SES

View as Markdown

Here we cover how to manage your SPF configuration when sending mail with Amazon SES in Amazon Web Services (AWS).

SPF

What SPF record you should set up when sending outbound emails through Amazon SES depends on what envelope from Amazon SES is advertising. This, in turn, depends on whether you have set up a custom MAIL FROM domain or use Amazon SES defaults.

If you are not using custom MAIL FROM domain, Amazon SES will use their own domain as the envelope from. As such, it doesn't need to be included in your domain's SPF record. If you don't send mail with any other sending provider, just use an empty SPF record to not allow anyone else to send with this envelope from:

Text
v=spf1 ~all

If you are using custom MAIL FROM domain, set up the following TXT record under that domain (not necessarily the root domain). Here's an example:

Text
v=spf1 include:amazonses.com ~all