All ESPs
Transactional
Amazon SES
Amazon Simple Email Service is the cheapest large-scale transactional option, billed at fractions of a cent per message. Authentication uses three CNAMEs published per identity (Easy DKIM) and an SPF include matching the AWS region.
DNS records to publish
| Type | Host | Value |
|---|---|---|
| CNAME | <selector1>._domainkey | <selector1>.dkim.amazonses.comEasy DKIM key 1 |
| CNAME | <selector2>._domainkey | <selector2>.dkim.amazonses.comEasy DKIM key 2 |
| CNAME | <selector3>._domainkey | <selector3>.dkim.amazonses.comEasy DKIM key 3 |
Authentication setup
SPF
Add include:amazonses.com to your SPF record. SES regions share the same include.
DKIM
Use Easy DKIM — publish the three CNAMEs SES generates. SES rotates keys automatically.
DMARC
p=none with rua first; SES Easy DKIM aligns by default with your sending domain.
Deliverability tips
- Request a production access bump and a dedicated IP pool before scaling beyond 50k/day.
- Use SES Configuration Sets to route bounce, complaint, and delivery events to SNS / SQS for reputation monitoring.
- Never send marketing mail from the same identity used for transactional mail — SES bills it the same, but reputation does not separate by itself.