# Configure your SES Account in AWS

{% hint style="success" %}
**Audience:** Admins, Developers, Solution Architects

**Purpose:** Explains how to configure an Amazon SES account in AWS so it can be integrated with <code class="expression">space.vars.Kizen\_company\_name</code>.
{% endhint %}

## Overview

This page walks through how to configure your Amazon Simple Email Service (Amazon SES) account in Amazon Web Services so it can be used with <code class="expression">space.vars.Kizen\_company\_name</code>. You’ll configure required SES settings, such as verifying your sending identity and preparing your account to send email.

Completing this setup ensures Amazon SES is ready to send email on behalf of <code class="expression">space.vars.Kizen\_company\_name</code> and supports reliable, scalable email delivery for your workflows.

***

## Before You Begin <a href="#before-you-start" id="before-you-start"></a>

You’ll need:

* An AWS account – You’ll use this to configure Amazon Simple Email Service (SES).
* Access to your domain’s DNS settings – You’ll need to add a few records that Amazon provides to verify your domain.
* <code class="expression">space.vars.Kizen\_company\_name</code> support  – You’ll need to contact <code class="expression">space.vars.Kizen\_company\_name</code> Support to turn on the Amazon SES feature for your account.
  * This step is required before the integration will work.
  * [Open a support ticket](https://support.kizen.com/support/tickets/new) and write something like: “Please enable the Amazon SES feature for our account.”
  * Once support confirms it’s enabled, you can continue with this setup.

***

{% stepper %}
{% step %}

#### **Verify your domain in Amazon SES** <a href="#id-1.-verify-your-domain-in-amazon-ses" id="id-1.-verify-your-domain-in-amazon-ses"></a>

Before Amazon lets you send emails from your business domain (like `yourcompany.com`), you have to prove you own it.

1. Sign in to your **AWS Console** and open **Amazon SES**.
   * Write down your **AWS region**; you’ll need it to integrate with <code class="expression">space.vars.Kizen\_company\_name</code>. It will look something like `us-east-1` or `us-west-2`.
2. In the sidebar, go to **Identities**, then select **Create Identity.**
3. Choose **Domain** and enter your domain name (for example, `yourcompany.com`).
4. Keep **Easy DKIM** selected and then select 2048-bit key.
   * Selecting DKIM adds a trusted email signature automatically and helps your emails avoid spam folders.
5. Select **Create Identity**
6. Amazon will show you a trio of **DNS records** (they look like long strings of text. For example: "iL8m5kz4a2ZrQp3k0P1s9tEXAMPLEo3VuS7f4="). These records let Amazon confirm your domain and send emails on your behalf.
   * Add all of the records to your DNS configuration (such as AWS Route 53, Google Domains, or Cloudflare).
7. Wait a few minutes (though it can take longer), then go back to Amazon SES and refresh the page. When you see **Verified** and **DKIM enabled**, you’re done.

**What you’re doing:**\
You’re proving to Amazon that you own your domain and allowing it to send emails that look like they come from you.

Need more details? Check out [Amazon’s guide for creating and verifying identities](https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html?utm_source=chatgpt.com).
{% endstep %}

{% step %}

#### **Create an IAM User and Keys** <a href="#id-2.-create-an-iam-user-and-keys" id="id-2.-create-an-iam-user-and-keys"></a>

Now you’ll create a secure user in AWS that <code class="expression">space.vars.Kizen\_company\_name</code> can use to send emails through your SES account.

1. In your **AWS Console**, open **IAM (Identity and Access Management).**
2. In the sidebar, go to **Users**, then select **Create user.**
3. Enter a name (for example, `kizen-ses-user`).
4. After the user is created, go to the user’s **Security credentials tab**, then scroll down and select **Create access key** (this creates a secure key that <code class="expression">space.vars.Kizen\_company\_name</code> will use to connect to your AWS account).
5. Under **Access key best practices & alternatives**, choose **Application running outside AWS.**
   * This tells Amazon that a trusted external app (<code class="expression">space.vars.Kizen\_company\_name</code>) will use this key to send emails through your SES account.
6. Copy or download both the **Access Key ID** and **Secret Access Key** (*don’t share these keys publicly*). Select **Done** to finish.
   * This step gives you two pieces of information that work like a username and password.
7. Staying with the user you created, go to the **Permissions** tab and select **Add permissions**. Then, select **Attach policies directly.**
   * This lets you give permissions to the user yourself instead of using a group.
8. In the list of policies, create a custom policy with these permissions under **Service** `SES`: `ses:SendEmail`*,* `ses:SendRawEmail`, `ses:ListIdentities`*,* `ses:GetIdentityDkimAttributes`

`{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ses:SendEmail", "ses:SendRawEmail", "ses:ListIdentities", "ses:GetIdentityDkimAttributes" ], "Resource": "*" } ] }`

**What you’re doing:**\
You’ve created a user and keys associated with that user that act like a secure password. You’ll paste them into <code class="expression">space.vars.Kizen\_company\_name</code> so it can send emails through your SES account. *Keep your Access Key ID and Secret Access Key safe; never share them publicly*.

Need more details? Check out [AWS guide to creating access keys for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html)**.**
{% endstep %}

{% step %}

#### **Set up feedback notifications (SNS)** <a href="#id-3.-set-up-feedback-notifications-sns" id="id-3.-set-up-feedback-notifications-sns"></a>

This step connects Amazon and <code class="expression">space.vars.Kizen\_company\_name</code> so <code class="expression">space.vars.Kizen\_company\_name</code> knows what happens after your emails go out (for example, if an email bounces or is marked as spam).

1. In **Amazon SES**, go to **Identities** and click on your verified domain.
2. Open the **Notifications** tab.
3. Under **Feedback Notifications**, select **Edit**.
4. For each of the three types—**Bounces**, **Complaints**, and **Deliveries**—do this:
   * Choose an **SNS topic you don’t own**.
   * Add SNS topic ARN with either URL, depending on your production environment:&#x20;
     1. <https://app.kizen.com/api/customer-ses-webhook>
     2. <https://app.fmo.kizen.com/api/customer-ses-webhook>
5. Select **Save changes**.

**What you’re doing:**\
When someone marks your email as spam or if an address doesn’t exist, Amazon relays that info to <code class="expression">space.vars.Kizen\_company\_name</code> through the webhook you’ve pasted. This lets <code class="expression">space.vars.Kizen\_company\_name</code> show accurate delivery reports and unsubscribe info.

Need more details? Learn more about [Amazon SNS](https://docs.aws.amazon.com/sns/latest/dg/welcome.html).
{% endstep %}
{% endstepper %}

Your SES Account should now be configured in AWS.

***

## What's Next <a href="#part-2-integrate-your-amazon-ses-account-with-kizen" id="part-2-integrate-your-amazon-ses-account-with-kizen"></a>

Next, continue to [Integrate Your Amazon SES Account with Kizen](/docs/integrations-and-plugins/integrations/amazon-ses/integrate-your-amazon-ses-account-with-kizen.md) to connect your SES configuration to <code class="expression">space.vars.Kizen\_company\_name</code> and start sending email from your <code class="expression">space.vars.automations</code>.

<details>

<summary>Related Topics</summary>

* [Amazon SES](/docs/integrations-and-plugins/integrations/amazon-ses.md)
* [Integrate your Amazon SES Account with Kizen](/docs/integrations-and-plugins/integrations/amazon-ses/integrate-your-amazon-ses-account-with-kizen.md)

</details>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://developer.kizen.com/docs/integrations-and-plugins/integrations/amazon-ses/configure-your-ses-account-in-aws.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.