AWS Route 53

This guide adds the DNS records from Adding and verifying a domain at AWS Route 53.

Records to create

Take the exact values from the records array of your domain (dashboard, API or spacepost domains doctor acme.com). The shape is always:

Type	Name	Value	Notes
CNAME	<token1>._domainkey	<token1>.dkim.amazonses.com	Three CNAMEs, one per token
MX	send	feedback-smtp.eu-central-1.amazonses.com	Priority 10
TXT	send	v=spf1 include:amazonses.com ~all	Return-path SPF
TXT	_dmarc	v=DMARC1; p=none;	Recommended

Steps

1. Open Route 53, Hosted zones, and select acme.com.
2. Click Create record. Use Simple routing.
3. Route 53 shows a name field that is relative to the zone; you can enter a1b2c3d4e5f6._domainkey and it appends the zone. If you paste a full name, remove the zone suffix, or you will end up with a doubled name.
4. Record type CNAME, value a1b2c3d4e5f6.dkim.amazonses.com, TTL 300. Repeat for all three.
5. MX: record name send, value 10 feedback-smtp.eu-central-1.amazonses.com (Route 53 expects priority and host in one value).
6. TXT: record name send, value "v=spf1 include:amazonses.com ~all". In Route 53 include the double quotes.
7. Repeat for _dmarc with "v=DMARC1; p=none;".

Notes

Route 53 is the one major provider where TXT values need their quotes and MX values combine the priority with the host.

With the AWS CLI:

aws route53 change-resource-record-sets --hosted-zone-id Z123EXAMPLE --change-batch '{
  "Changes": [
    { "Action": "UPSERT", "ResourceRecordSet": { "Name": "a1b2c3d4e5f6._domainkey.acme.com", "Type": "CNAME", "TTL": 300, "ResourceRecords": [{ "Value": "a1b2c3d4e5f6.dkim.amazonses.com" }] } },
    { "Action": "UPSERT", "ResourceRecordSet": { "Name": "send.acme.com", "Type": "MX", "TTL": 300, "ResourceRecords": [{ "Value": "10 feedback-smtp.eu-central-1.amazonses.com" }] } },
    { "Action": "UPSERT", "ResourceRecordSet": { "Name": "send.acme.com", "Type": "TXT", "TTL": 300, "ResourceRecords": [{ "Value": "\"v=spf1 include:amazonses.com ~all\"" }] } }
  ]
}'

After saving, run spacepost domains doctor acme.com or call POST /domains/{id}/verify. If it does not verify, see Troubleshooting.