How to Set Up DKIM in AMAZON SES?

DomainKeys Identified Mail, or DKIM, is an email authentication standard that helps prevent phishing, email spoofing, spamming, and other email-based cyber attacks. It verifies and validates the email, and lets the recipient know that the email originated from a particular organization. This way, no malicious group or individual can impersonate the organization and send emails on its behalf.

For detailed information on DomainKeys Identified Mail, read more on What is DKIM?

Bear in mind that after setting up EASY DKIM, Amazon SES automatically adds 1024-bit key to every email you send.

Before setting up DKIM, you will need to consider the following rules :

1. It is required to set up DKIM only on the domains where your ‘From’ address is used.
2. If you use several AWS regions, you will need to set up DKIM in each of those regions.
3. EASY DKIM is applied in the following manner: 

• • DKIM for a subdomain overrides the settings for the parent domain.
  • DKIM for an email address overrides the settings for the subdomain and the parent domain.                  

1.   Setting up EASY DKIM for a Domain
   1. Log in to your Amazon SES console here.
   2. Navigate to ‘Identity Management’ and choose ‘Domains’.
   3. In the list of available domains, choose the domain where you want to set up EASY DKIM.
   4. Under ‘DKIM’, choose ‘Generate DKIM settings’.
   5. Copy the shown CNAME records.
      
      
   6. Add the CNAME records to the DNS configuration of your domain and VOILA! You’re done.

2.   Setting up EASY DKIM for an Email

1. 1. Open the Amazon SES console. 
   2. Navigate to ‘Identity Management’ and choose ‘Email Address’.
   3. From the list of available email addresses, choose the one you want to set up Easy DKIM for.
   4. Copy the shown CNAME records.
   5. Add the CNAME records to the available DNS configuration of your domain. 

NOTE: Easy DKIM changes take 48-72 hours to reflect on Amazon SES.