SES Domain Identity Verification

Question

Hello, I've been trying to verify an SES identity for more than a week and everytime I get Failed.

I've purchuased a domain in route 53. I have a hosted zone with the same name, a public one. I haven't modified the hosted zone.

In the SES service I've created a new Identity. I chose Domain and entered, ex: mydomain.com
Then I choose "Easy DKIM", "RSA_2048_BIT", enabled "Publish DNS records to Route53", enabled "DKIM signatures" and finally "Create Identity".

After that I went to my domain hosted zone and noticed 3 CNAME records were added.

The problem is that for 3 days I get the verification is still pending and then I get failed. I've tried this 3 times for 9 days. I'm really not sure what I'm doing wrong.

Acording to the documentation I'm doing everything i need when I create an Identity. Is there a role I need to associate? Do I need to change any setting in route 53?

![Identity](/media/postImages/original/IMmI1nGItpR365UpRFOgnP0A)

![Hosted Zone](/media/postImages/original/IMfU2aBksbRIWxTKHSyH_e0w)

Both record names and values match in the identity and in the hosted zone.

Thank you

Accepted Answer

Thanks for the screenshots.

I can find your domain with WHOIS tools.
But when I try to get public information on your domain, I had errors.

I think the problem is coming form the NS field in your R53 hosted zone. I think it's not redirected to R53 name servers. I can be the root cause of your trouble

Maybe this part of the documentation can help you : 
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/troubleshooting-domain-unavailable.html#troubleshooting-domain-unavailable-transferred-domain-wrong-name-servers

SES Domain Identity Verification

Relevant content