Easy DKIM Considerations
When you use Easy DKIM to authenticate your email, the following rules apply:
You only need to set up Easy DKIM for the domain that you use in your "From" address. You don't need to set up Easy DKIM for domains that you use in "Return-Path" or "Reply-to" addresses.
Amazon SES is available in several AWS Regions. If you use more than one AWS Region to send email, you have to complete the Easy DKIM setup process in each of those regions to ensure that all of your email is DKIM-signed.
When you verify a domain, your Easy DKIM settings also apply to all subdomains of that domain, unless you set up Easy DKIM for specific subdomains.
If you set up Easy DKIM for a parent domain, a subdomain, and an email address, Amazon SES applies Easy DKIM settings in the following ways:
DKIM settings for a subdomain override the settings for the parent domain.
DKIM settings for an email address override the settings for the subdomain (if applicable) and the parent domain.
To set up Easy DKIM for a domain
Open the Amazon SES console at https://console.aws.amazon.com/ses/.
In the navigation pane, under Identity Management, choose Domains.
In the list of domains, choose the domain that you want to set up Easy DKIM for.
If you haven't started the verification process for the domain yet, see the procedures at Verifying a domain with Amazon SES.
Under DKIM, choose Generate DKIM Settings.
Copy the three CNAME records that appear in this section. Alternatively, you can choose Download Record Set as CSV to save a copy of the records to your computer.
The following image shows an example of the DKIM section.
Add the CNAME records to the DNS configuration for your domain.
Once done, the DKIM Verification Status will change to: verified