I created and verified a domain identity for SES (schreibers.ca).
Using EasyDKIM, AWS created three CNAME records, and I imported them into my DNS provider (Cloudflare). The AWS console shows "DKIM configuration: Successful" indicating this was set up correctly.
However, one of the three records points to an Amazon DNS record that only shows p= instead of a valid signature:
$ dig -t CNAME olhccwxcnx42ghviz2d32sf3eja6z5md._domainkey.schreibers.ca +short
olhccwxcnx42ghviz2d32sf3eja6z5md.dkim.amazonses.com.
$ dig -t TXT olhccwxcnx42ghviz2d32sf3eja6z5md.dkim.amazonses.com +short
"p="
The other two records work as expected. One is:
$ dig -t CNAME zrm3kgm576ob6ebsy3fp5mivc5razy7x._domainkey.schreibers.ca +short
zrm3kgm576ob6ebsy3fp5mivc5razy7x.dkim.amazonses.com.
$ dig -t TXT zrm3kgm576ob6ebsy3fp5mivc5razy7x.dkim.amazonses.com +short
"p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCIn1nU8Synvvgi7qaFW9la384GkWWQjKOUEtT9J+0ynaZzpgq/cSzNsD8RzvMs3UnXlfbi/mOEvV1Bk6tCf2mvVzZzjqtI8oxzTo8Tc0LE/0+MPO1fEoAyZ9ABLv2x90QS+IiJ+isdaeErrA1xZrSDL3m9C/Z1HNgeiFBI9VYyuQIDAQAB"
Retry enabling SES DKIM. See if that fixes the problem