Domains and Amazon SES

Sending is only allowed from a verified domain you added in the dashboard.

Add the domain, publish the TXT ownership record, the SPF record, DMARC, and the three DKIM CNAMEs. Then press Verify.

Set AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, and AWS_REGION. SendFS calls SES v2 CreateEmailIdentity and sends with the SES SendEmail action. The IAM user needs ses:SendEmail, ses:CreateEmailIdentity, and ses:GetEmailIdentity.

Point SES event publishing at POST /webhooks/ses/:SES_WEBHOOK_TOKEN. Delivery, bounce, and complaint notifications update the email and the suppression list.