amazon ses verification pending issue

Question

I have created a an email address with my domain name I purchased from namecheap on workmail, I used that address to create an identity in SES. the problem is when I try to verify it says "successfully sent a verification email" but I don't receive it in my workmail inbox. I have set up DKIM, Custom mail from domain is also pending and i have done all the necessary dns configs.

Jainam · Answer

Hi, to troubleshoot Amazon SES email verification issues when using WorkMail:

1. First, verify your DNS configurations are correct:

```bash
# Check MX record
dig MX yourdomain.com

# Expected output should include:
# inbound-smtp.region.amazonaws.com

# Check DKIM records
dig +short TXT *._domainkey.yourdomain.com

# Check SPF record
dig +short TXT yourdomain.com
```

2. Verify your domain in SES first:
```bash
aws ses verify-domain-identity --domain yourdomain.com
```

3. Check required DNS records:
- TXT record for domain verification
- DKIM CNAME records (3 records)
- MX records for WorkMail
- Custom MAIL FROM domain records (if configured)

Example DNS records:
```
# Domain verification
_amazonses.yourdomain.com  TXT   "verification-token"

# DKIM records
token1._domainkey.yourdomain.com  CNAME  token1.dkim.amazonses.com
token2._domainkey.yourdomain.com  CNAME  token2.dkim.amazonses.com
token3._domainkey.yourdomain.com  CNAME  token3.dkim.amazonses.com

# MX record
yourdomain.com  MX  10 inbound-smtp.region.amazonaws.com

# Custom MAIL FROM
mail.yourdomain.com  MX  10 feedback-smtp.region.amazonaws.com
mail.yourdomain.com  TXT  "v=spf1 include:amazonses.com ~all"
```

4. Troubleshooting steps:
- Check spam folder
- Verify WorkMail email rules
- Ensure WorkMail organization is in the same region as SES
- Check WorkMail console for delivery issues
- Review SES sending statistics

5. If still not receiving verification email:
```bash
# Use AWS CLI to check identity status
aws ses get-identity-verification-attributes \
    --identities "yourdomain.com" "email@yourdomain.com"

# Check if domain is out of SES sandbox
aws ses get-account-sending-enabled

# List all identities
aws ses list-identities
```

For more information, see:
- [Amazon SES Email Verification](https://docs.aws.amazon.com/ses/latest/dg/verify-addresses-and-domains.html)
- [Amazon WorkMail Organization Setup](https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html)

If issues persist:
1. Try verifying a different email address temporarily
2. Contact AWS Support
3. [Consider using AWS Support's SMTP test tool](https://docs.aws.amazon.com/ses/latest/dg/send-email-smtp-client-command-line.html)

Remember: DNS changes can take 24-48 hours to fully propagate.

amazon ses verification pending issue

Relevant content