Bobcares with the assistance of our AWS Support Services has created a simple article on how to Add DKIM record AWS with an easy setup DKIM for a verified domain identity.

Obtaining DKIM Records for an AWS identity

Using the web-based Amazon SES console or the Amazon SES API can manage the DKIM settings for the identities authenticated with either Easy DKIM or BYODKIM. The DKIM records can be obtained to enable or disable DKIM signing for an identity.

We can obtain the DKIM records for the domain or email address by using the Amazon SES console.

To obtain the DKIM records

• Log in to the AWS Management Console and access the Amazon SES console.

• In the navigation pane under Configuration, select Verified identities.

• Choose the identity for which you want to obtain DKIM records from the list of identities.

• Expand View DNS records on the Authentication tab of the identity details page.

• Copy the CNAME records Easy DKIM or the TXT record if you used BYODKIM. Another way you can even choose the “Download .csv record set” to save a copy of the records to your system.

Obtain the DKIM records for an identity using AWS CLI

At the command line, type the below command:

aws ses get-identity-dkim-attributes --identities "abc.com"Copy Code

You need to replace

abc.comCopy Code

with the domain name to which you want to obtain DKIM records.

This output contains a

DkimTokensCopy Code

section, as shown below:

{
    "DkimAttributes": {
        "example.com": {
            "DkimEnabled": true,
            "DkimVerificationStatus": "Success",
            "DkimTokens": [
                "hirjd4exampled5477y22yd23ettobi",
                "v3rnz522czcl46quexamplek3efo5o6x",
                "y4examplexbhyhnsjcmtvzotfvqjmdqoj"
            ]
        }
    }
}Copy Code

Use the tokens to create the CNAME records. To create CNAME use the below template:

token1._domainkey.abc.com CNAME token1.dkim.amazonses.com
token2._domainkey.abc.com CNAME token2.dkim.amazonses.com
token3._domainkey.abc.com CNAME token3.dkim.amazonses.comCopy Code

Replace each instance 

token1Copy Code

with the first token in the list, you received when you ran the

get-identity-dkim-attributesCopy Code

command. Replace all instances 

token2Copy Code

with the second token from the list, and replace all instances 

token3Copy Code

with the third token in the list.

Disabling Easy DKIM for an identity

You can easily disable DKIM authentication for an identity using the Amazon SES console.

To disable DKIM for an identity

• Log in to the AWS Management Console and access the Amazon SES console.

• In the navigation pane under Configuration, select Verified identities.

• In the list of identities, choose the identity for which you want to disable DKIM records from the list.

• Under the Authentication tab in the DomainKeys Identified Mail (DKIM) container, select the Edit option.

• Next in Advanced DKIM settings clear the Enabled box in the DKIM signatures field.

Disable DKIM for an identity using the AWS CLI

Type the below order in the command line:

aws ses set-identity-dkim-enabled --identity abc.com --no-dkim-enabledCopy Code

note to replace

abc.comCopy Code

with the domain name that you want to disable DKIM.

Enabling DKIM for an identity

If you had disabled DKIM for an identity then you can enable it back by using the Amazon SES console.

To enable DKIM for an identity

• Log in to the AWS Management Console and access the Amazon SES console.

• In the navigation pane under Configuration, select Verified identities.

• In the list of identities, choose the identity for which you want to enable DKIM records from the list.

• Under the Authentication tab in the DomainKeys Identified Mail (DKIM) container select the Edit option.

• Next in Advanced DKIM settings check the Enabled box in the DKIM signatures field.

Enable DKIM for an identity using the AWS CLI

Type the below order in the command line:

aws ses set-identity-dkim-enabled --identity abc.com --dkim-enabledCopy Code

Note to replace

abc.comCopy Code

with the domain name that you want to enable DKIM.

[Looking for a solution to another query? We are just a click away.]

Conclusion

To sum up, from Add DKIM record AWS article we have tried to obtain the DKIM records for the domain or email address by using the Amazon SES console.