Amazon Simple Email Service (SES) is a cloud-based email sending service designed for bulk and transactional email.

Who is this skill for?

This skill is intended for developers and DevOps engineers who need to configure Amazon SES for domain-based email sending.

What are the critical rules to follow when using this skill?

Key rules include creating a domain identity, configuring a custom MAIL FROM subdomain, and setting up DMARC records for email authentication.

Is there any prerequisite knowledge needed to use this skill?

While the skill simplifies the process, a basic understanding of email authentication concepts like DKIM, SPF, and DMARC is beneficial.

Amazon SES Configuration

OfficialFree

Streamline your Amazon SES setup for email sending.

by aws2.3k stars on aws/agent-toolkit-for-aws

1 views

Updated Aug 10, 2026

Get this skill

Free · Opens the source repo

What Amazon SES Configuration does

The Amazon SES Configuration skill is designed for developers and DevOps engineers who need to set up Amazon Simple Email Service (SES) for production email sending. This skill simplifies the process of domain identity creation and email authentication, guiding users through essential configurations without requiring extensive knowledge of email protocols like DKIM, SPF, and DMARC. It is particularly useful for those who are setting up or troubleshooting SES domain verification and deliverability issues.

With this skill, users can easily create a domain identity, configure custom MAIL FROM subdomains, and set up DMARC records to ensure proper email authentication. The skill also addresses common pitfalls by enforcing best practices, such as presenting all necessary DNS records in one batch and checking if Route 53 is hosting the domain for automatic DNS creation. By following the outlined steps, users can achieve a compliant and effective email sending setup that adheres to AWS standards.

This skill is not intended for those looking to verify email addresses only or for more complex email routing scenarios involving Mail Manager, SNS, Pinpoint, or WorkMail. Instead, it focuses on the foundational aspects of using SES for domain-based email sending, making it an ideal choice for developers who want to ensure their email infrastructure is robust and reliable.

When to use it

Use this skill when you need to set up a domain for sending emails via Amazon SES, verify domain identity, or troubleshoot related issues.

When not to use it

This skill is not suitable for users who only need to verify email addresses or those requiring advanced email routing features.

What you can build with it

Setting Up Domain Identity

Quickly create a domain identity in Amazon SES to start sending emails from your domain.

Configuring Email Authentication

Easily configure DKIM, SPF, and DMARC records to ensure your emails are authenticated and delivered.

Troubleshooting DKIM Issues

Use the skill to diagnose and resolve common DKIM verification problems during your SES setup.

How to install Amazon SES Configuration

View source

1. Install with the skills CLI

npx skills add aws/agent-toolkit-for-aws/amazon-ses --agent claude-code

2. Or install it manually

Download the skill folder and drop it into ~/.claude/skills/ for all projects, or .claude/skills/ to scope it to one repo. Restart Claude Code so it picks up the new skill.

Anthropic's agentic coding CLI, and the reference implementation of Agent Skills. Drop a skill folder into ~/.claude/skills and Claude Code loads it automatically whenever a task matches the skill's description. Claude Code docs

Inside SKILL.md

Written by aws

Amazon SES

Recommended: Use the AWS MCP Server with SES permissions for sandboxed execution and CloudTrail audit logging. Without MCP: All operations use standard AWS CLI syntax (aws sesv2 ...).

Overview

This skill helps developers and DevOps engineers configure Amazon SES for production email sending. It targets users who are not email authentication experts — guiding them through complete domain setup following AWS best practices without requiring deep knowledge of DKIM, SPF, or DMARC.

Routing

If the user wants to...	Read
Set up a domain for sending, configure email authentication, or troubleshoot DKIM	Setting up SES domain identity

Security

Use IAM roles with ephemeral credentials (STS) — never long-lived access keys
Scope IAM permissions to specific SES actions per workflow (see reference files for required permissions)
Enable CloudTrail for SES API call auditing
DMARC p=none is monitoring only — plan progression to p=quarantine after confirming alignment
Never hardcode credentials, endpoints, or secrets in examples

Critical Rules

MUST create a domain identity (not email identity) for production sending
MUST configure custom MAIL FROM subdomain for SPF alignment
MUST configure DMARC TXT record (p=none minimum) for domain alignment
MUST present all DNS records together in one batch
MUST ask user for preferred MAIL FROM subdomain (do not assume a default)
SHOULD check if Route 53 hosts the domain and offer automatic DNS creation
SHOULD NOT claim 72-hour wait — verification typically completes in minutes once DNS propagates

Additional Resources

Frequently asked questions about Amazon SES Configuration

Similar skills

Turborepo

Optimized build system for JavaScript/TypeScript monorepos.

Azure Pipelines Validation

Streamline your Azure DevOps pipeline changes locally.

Azure Developer CLI

Streamline your Azure project workflows with best practices.

Azure Container Registry CLI

Manage Azure Container Registry resources with ease.

Aspire

Build and orchestrate polyglot distributed applications seamlessly.

Vercel CLI

Manage and deploy Vercel projects from the command line.