DKIM in SES is misteriously being configured. How do i stop this from happening?

For about a year now, every few months I receive email notifications from AWS that a new DKIM was set up in a region for a domain that i did not do. Sometimes it will happen multiple times a day. I am the root user, I have changed the password. I do not know how this is happening. I suspect somethiung is not properly secured. How do i go about finding out who is setting up the DKIM in random regions with random domains and how do i prevent this from happening again. For now, i have manually been going to the region and deleting the domain. Any help is appreciated.