Stay up to date with the latest from the Knowledge Center. See all new and updated Knowledge Center articles published in the last month and re:Post’s top contributors.
Removing Domain Verification Record after verification in SES
Hello,
A customer is asking about whether is it possible to remove the TXT record from their domain once the domain verification process for SES has finished.
They mention an [answer from the AWS Forums][1] indicating that they shouldn't. If so, they'd like to know what's the technical reason for it.
Thanks! [1]: https://forums.aws.amazon.com/thread.jspa?threadID=243741&tstart=0
- Newest
- Most votes
- Most comments
They shouldn't remove the TXT record as the process of having the domain verified runs periodically. Unfortunately, they should keep the TXT record all the time.
The reason is basically that AWS need to know that customer is still owner of the domain.
In this public documentation: http://docs.aws.amazon.com/ses/latest/DeveloperGuide/verified-domain-revocation.html We state:
"Amazon SES periodically reviews domain verification status, and revokes verification in cases where it is no longer valid. If Amazon SES is unable to detect the TXT record information required to confirm ownership of a domain, you will receive an Amazon SES Domain Verification REVOCATION WARNING email from Amazon SES."
Relevant content
- asked a year ago
- asked 10 months ago
AWS OFFICIALUpdated 8 months ago- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 9 months ago
Hello JP,
as Domain can be verified either with TXT record or DKIM record, does AWS considers only TXT records for periodic checks? does AWS ignores DKIM records for periodic checks to verify the owner of the domain ?