{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"entry_sha256":"0b25348750a261a44eab988584e52bf98023b3b05c45f95dfbe9eac29252e611","entry":{"id":"aws/ses-production-access","name":"Amazon SES - verify a domain and leave the sandbox","vendor":"Amazon Web Services","summary":"Verify your sending domain in Amazon SES (three DKIM CNAME records), then ask AWS to move the account out of the SES sandbox for that Region so you can email anyone. AWS reviews each request by hand.","aliases":["amazon-ses","ses","ses-sandbox"],"category":"email","group":"B","homepage":"https://aws.amazon.com/ses/","docs":["https://docs.aws.amazon.com/ses/latest/dg/request-production-access.html","https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html"],"status":"researched","last_verified":null,"last_researched":"2026-10-25","sources":[{"id":"prod-access","url":"https://docs.aws.amazon.com/ses/latest/dg/request-production-access.html","title":"Request production access (Moving out of the Amazon SES sandbox)","accessed":"2026-10-25","supports":"Sandbox limits (verified recipients only, 200 messages per 24 hours, 1 message per second, per Region); request fields (Marketing or Transactional, website URL, up to 4 additional contacts, English/Japanese, acknowledgement about opt-in and bounce/complaint handling); verifying a domain first helps approval; cannot edit while under review; initial response within 96 hours, longer if more information needed; CLI put-account-details.","kind":"official"},{"id":"identities","url":"https://docs.aws.amazon.com/ses/latest/dg/creating-identities.html","title":"Creating and verifying identities in Amazon SES","accessed":"2026-10-25","supports":"Domain identity with Easy DKIM publishes three CNAME records; DNS changes can take up to 72 hours; troubleshooting (host field, provider auto-appending domain, underscores, per-Region records); email verification link expires after 24 hours; identities are per Region; 10,000 identities per Region.","kind":"official"},{"id":"pricing","url":"https://aws.amazon.com/ses/pricing/","title":"Amazon SES pricing","accessed":"2026-10-25","supports":"$0.10 per 1,000 outbound emails (a la carte); dedicated IP $24.95/month; new customers can use AWS Free Tier credits.","kind":"official"},{"id":"faq-denied","url":"https://repost.aws/knowledge-center/ses-production-access-request-faq","title":"AWS re:Post Knowledge Center - SES production access request FAQ","accessed":"2026-10-25","supports":"AWS does not share specific denial reasons; Support cannot see or overturn them; requests with too little use-case detail get an automatic denial asking for more detail - reply on the case. Seen via search summary; direct fetch returned 403.","kind":"official"},{"id":"repost-denied","url":"https://repost.aws/questions/QU-0FO4B5DTVqc-drZUifG_Q/ses-production-access-denied-for-no-stated-reason","title":"re:Post question - SES production access denied for no stated reason","accessed":"2026-10-25","supports":"Developers report denials with no reason given and re-reviews with the same answer.","kind":"community"},{"id":"repost-guidance","url":"https://repost.aws/questions/QUyU0rz9aaSGelp75JN8-A2A/ses-production-access-request-denied-need-guidance","title":"re:Post question - SES production access request denied, need guidance","accessed":"2026-10-25","supports":"Answers advise a business domain with proper DNS records and a detailed use case (email types, volume, list source, bounce handling).","kind":"community"},{"id":"aup","url":"https://aws.amazon.com/aup/","title":"AWS Acceptable Use Policy","accessed":"2026-10-25","supports":"Prohibits distributing unsolicited mass email; AWS may disable violating resources.","kind":"official"}],"allowed_domains":["aws.amazon.com"],"account_model":{"summary":"SES lives inside an AWS account. Sandbox status, identities and sending quotas are separate in every AWS Region, so verify the domain and request production access in each Region you send from.","notes":["Even after leaving the sandbox, every From / Source / Sender / Return-Path identity must be verified."]},"prerequisites":[{"entry":"aws/account-and-iam","note":"An activated AWS account and a non-root user with SES permissions."},{"need":"A domain you control with access to its DNS settings","note":"e.g. the namecheap/dns entry if the domain is at Namecheap."}],"have_ready":[{"kind":"live_website","description":"A live website on the sending domain that shows what the business does.","why":"The request asks for a website URL so AWS can understand the mail you will send.","needed_for":["request-production"],"auto_check":"website_live","source":"prod-access"},{"kind":"domain_email","description":"Access to the DNS settings of the sending domain (to add three CNAME records).","needed_for":["verify-domain"],"auto_check":"dns_record","source":"identities"},{"kind":"other","description":"A written use case: which emails (transactional or marketing), expected volume, how recipients opt in, and how you handle bounces and complaints (e.g. SNS notifications and a suppression list).","why":"Thin descriptions get an automatic denial asking for more detail.","needed_for":["request-production"],"auto_check":"none","source":"faq-denied"}],"steps":[{"id":"choose-region","title":"Pick the SES Region you will send from","summary":"Sandbox status and identities are per Region; choose one (for example eu-west-2 London) and stay in it for every step.","route":"guided","depends_on":[],"gate":"none","sources":["prod-access","identities"]},{"id":"verify-domain","title":"Create a domain identity and publish the DKIM records","summary":"In SES Identities, create a Domain identity (Easy DKIM, 2048-bit default) and add the three CNAME records SES shows at your DNS host. If the domain is in Route 53 in the same account SES can publish them for you.","route":"copilot","depends_on":["choose-region"],"gate":"human_submit","url":"https://console.aws.amazon.com/ses/","lead_time":{"official":{"text":"DNS changes can take up to 72 hours to propagate; the identity shows Verified once SES sees all DKIM records.","source":"identities"}},"preflight":["domain_has_mx"],"recovery":[{"hiccup":"Domain still not verified after 72 hours.","fix":"Check the records are in the right fields, that your DNS host did not append the domain to the Name (remove it or end the value with a dot), that the underscore in _domainkey is present, and that the records are for this Region.","source":"identities"},{"hiccup":"Verification email for an email-address identity expired.","fix":"The link lasts 24 hours; choose Resend on the identity page.","source":"identities"}]},{"id":"request-production","title":"Request production access","summary":"From Account dashboard > Get set up > Request production access, choose Transactional or Marketing, enter your website URL, up to 4 contact emails and language, tick the acknowledgement about opt-in and bounce/complaint handling, and press Submit yourself.","route":"copilot","depends_on":["verify-domain"],"gate":"human_submit","url":"https://console.aws.amazon.com/ses/","fields":[{"label":"Website URL","from_profile":"website"},{"label":"Additional contacts","from_profile":"support_email"}],"preflight":["website_live","website_not_form_only","domain_email_matches_website"]},{"id":"review","title":"Wait for AWS review","summary":"AWS Support reviews the request; you cannot edit it while under review. Answer any follow-up questions on the support case.","route":"guided","depends_on":["request-production"],"gate":"third_party_review","lead_time":{"official":{"text":"Initial response within 96 hours; longer if AWS needs more information.","source":"prod-access"},"reported":{"text":"Some developers report denials with no reason and re-reviews that repeat the denial.","source":"repost-denied"}},"recovery":[{"hiccup":"Automatic denial asking for more details.","fix":"Reply on the same support case with a detailed use case (mail types, volume, list source, opt-in, bounce/complaint handling).","source":"faq-denied"},{"hiccup":"Denied with no specific reason.","fix":"AWS does not share reasons and Support cannot overturn them. Improve the basics (business domain with SPF/DKIM/ DMARC, a real website, a specific use case) and ask for reconsideration on the case.","source":"repost-guidance"}]}],"outputs":[{"name":"SES_REGION","description":"AWS Region where the SES account is out of the sandbox.","secret":false,"example_format":"eu-west-2"},{"name":"SES_FROM_ADDRESS","description":"Verified sender address on the verified domain.","secret":false,"example_format":"no-reply@yourdomain.com"}],"terms_notes":[{"kind":"rules_say","severity":"red","title":"Only send to people who asked","text":"The request makes you confirm you only email people who explicitly asked for it and handle bounces and complaints; the AWS AUP bans unsolicited mass email. Plain-English summary, not legal advice.","source":"prod-access"},{"kind":"rules_say","severity":"amber","text":"Approval is per Region - a new Region starts in the sandbox again (200 messages a day, verified recipients only).","source":"prod-access"},{"kind":"people_report","severity":"amber","text":"Denials often come without a reason, and Support staff say they cannot see or reverse them.","source":"repost-denied"}],"pricing_notes":{"free_tier":"New AWS customers can apply AWS Free Tier credits (up to $200) to SES.","costs":"$0.10 per 1,000 outbound emails on a la carte pricing; dedicated IPs $24.95 per IP per month.","source":"pricing"},"stripe_projects":false,"api_provisioning":{"available":"yes","notes":"Domain identities (CreateEmailIdentity) and the production access request (aws sesv2 put-account-details --production-access-enabled) can both be done by API/CLI; the review is still manual.","docs":["https://docs.aws.amazon.com/ses/latest/dg/request-production-access.html"],"source":"prod-access"},"detect":{"packages":["@aws-sdk/client-sesv2","@aws-sdk/client-ses"]}}}