SENDUNE / Guides

Getting Production Access to AWS SES

Move out of AWS SES Sandbox and increase sending limits.

Sign up free or Sign in

To prevent fraud and abuse AWS SES puts new accounts in 'Sandbox Mode' with certain restrictions: you can send only to addresses you have verified, at most 200 emails in 24 hours and 1 email a second. Follow the below steps to get out of the Sandbox and increase your sending limits.

As of early 2024, AWS has changed the process to get production access to the Simple Email Service (SES). AWS now expects a verified domain, with DNS records for SPF, DMARC and DKIM in place, before you ask to move out of the SES Sandbox. A verified domain gets the request approved faster. This is a progressive step in controlling spam.

These steps are for everyone who wants to send emails using AWS SES and not just SENDUNE users. SENDUNE users must first complete the setups in your settings dashboard and directly move to Step 9 below.

Don't let the steps intimidate you. They look complicated but are quite easy.

Step 1

Login to your AWS account. Search for 'SES' and go to the Simple Email Service dashboard.

login

Step 2

Click the the dropdown at the top-right. Select the AWS region from which you want to send emails.

select region

Step 3

Select 'Account dashboard' option from the left panel. Then click the 'Get set up page' button.

dashboard

Step 4

Click 'Create identity'. Identity here refers to an active domain that represents the business on behalf of which the emails will be sent.

identity
domain

Step 5

Select the 'Domain' radio button. Then enter your domain or sub-domain name. Then choose options as shown in the image below. It is recommended you use a sub-domain to send your emails because your main domain might be used for your business email. It is VERY IMPORTANT that the domain you enter here have an active website that showcases the nature of your business.

Step 6

You will be presented with 4 DNS Records (3 CNAME + 1 TXT). Enter these DNS records in your domain Registrars dashboard. These DNS records must not be deleted as long as you want to send emails. Each record explained, with the common mistakes: SPF, DKIM and DMARC for AWS SES.

records

Step 7

AWS automatically checks for these DNS records at regular intervals. Once these records are validated, you will receive a confirmation email. It usually takes a few minutes but occasionally can take up to an hour to validate these records.

dns

Step 8

In case you do not receive the above mail you can go to 'Identities' section in SES dashboard to check for the verification status of your domain. SES dashboard will display a 'Verified' status.

verified

Step 9

Click 'Get set up' from left panel and then click 'Request production access'.

production access

Step 10

Choose the type of emails you send most, 'Marketing' or 'Transactional'. Enter your website address (the same domain you entered earlier) and up to 4 email addresses where AWS can reach you. Accept the terms and submit the request. It is VERY IMPORTANT that the domain you enter here have an active website that showcases the nature of your business. AWS might reject your request if you do not have a website or just have a generic landing page.

type

Step 11

That's it. You can sit back and relax. If everything is in order AWS will move your SES account into production and you will be able to send emails. It might take upto a day before AWS grants your request. Occasionally AWS might send you an email asking for more details. Reply with as much detail as possible. You must be able to convince AWS that you are a genuine email sender.

success
limits

Step 12

You will receive an email once AWS moves your SES account out of the sandbox. You can also click 'Account dashboard' from the left panel and see your sending limits. New production accounts usually start at 50,000 emails per day and 14 emails per second. AWS answers within 24 hours.

increase limits

Step 13

If you need more you can always raise a request to increase your limits. AWS often raises them on its own; how to ask, and what gets a yes: AWS SES sending limits.

quota

Step 14

You can request a raise for your 'Sending quota'.

send rate

Step 15

You can also request a raise for your 'Sending rate'.

reputation

Step 16

And finally, keep an eye on your sending reputation. You can find this by clicking 'Reputation metrics' in the SES dashboard. Make sure your reputation is always 'Healthy'. AWS will block your account if you send unsolicited emails. AWS recommends a bounce rate under 5% and a complaint rate under 0.1%. Above 10% bounces or 0.5% complaints, AWS may pause your account's sending. More in AWS SES bounce and complaint rates.