How to Set up AWS Simple Email Services

Summary:

VANAS LMS allows administrators to use Amazon Simple Email Service (SES) for sending notifications and communications. SES ensures secure and authenticated email delivery, supporting both SMTP and API integrations.

Applies To:
VANAS LMS – Administrators

Before You Begin

• Ensure you have access to an AWS account.

• Ensure you have access to modify DNS records for your domain, or have someone who can.

• Decide whether you want to use SMTP (quick setup) or API (recommended for long-term production use).

Steps to Set Up Amazon SES

Step 1 – Sign in to AWS and Open SES Console

1. Go to AWS and sign in.

2. From the Services menu, search for Amazon Simple Email Service (SES).

3. Select a region in the top-right (e.g., US East – N. Virginia, us-east-1) and note it — you will need it later.

Step 2 – Verify Sending Identity

1. In the SES console, select Verified identities → Create identity.

2. Choose Domain (recommended) and enter your domain (example: schooldomain.com).

3. Copy the DNS records SES provides:

   • 1 TXT record to verify domain ownership

   • 3 CNAME records for DKIM

4. Add the DNS records yourself or provide them to your DNS administrator.

5. If you cannot change DNS, choose Email address instead, and verify via the email confirmation link sent by AWS.

Step 3 – Wait for Verification

• DNS verification may take minutes to hours depending on your provider.

• SES will mark the domain/email as Verified when complete.

• If verification fails, double-check DNS entries for accuracy.

Step 4 – Enable DKIM (Recommended)

• If CNAME DKIM records were added, SES will automatically enable DKIM after verification.

• DKIM improves deliverability and reduces spam likelihood.

Step 5 – Request Production Access

1. In SES, navigate to Account details / Sending.

2. Click Request production access and complete the form:

   • Explain your usage (transactional notifications, marketing, etc.)

   • Provide sample email content (plain text is fine)

3. Approval usually takes a few hours to one business day.

• Once approved, you can send to any recipient, not just verified addresses.

Step 6 – Create Credentials

Option A – SMTP (Quick Setup)

1. In SES, go to SMTP settings → Create SMTP credentials.

2. Copy and save the SMTP username and password securely.

3. SMTP host example: email-smtp.us-east-1.amazonaws.com

4. Common ports: 587 (STARTTLS/TLS), 465 (SSL), 25 (not recommended)

Option B – API (Recommended)

1. Create an IAM user with permissions to send email via SES.

   • Attach AmazonSESFullAccess or a minimal SES send policy.

2. Copy Access Key ID and Secret Access Key for app configuration.

Step 7 – Add SPF Record (Recommended)

• Add or update your SPF TXT record:

  v=spf1 include:amazonses.com ~all
  

• This helps inbox placement and authorizes SES to send emails on your domain’s behalf.

Step 8 – Configure VANAS LMS

1. Open the Email Settings page in VANAS LMS.

2. Choose Provider: AWS SES.

3. If using API keys:

   • Enter AWS Access Key ID, AWS Secret Access Key, and Region.

4. If using SMTP:

   • Enter SMTP username/password, host (region-specific), and port.

5. Click Save Settings.

Step 9 – Send a Test Email

• Use the Send Test Email button in LMS or SES console.

• In sandbox mode, only verified addresses can receive emails until production access is approved.

How to Test

1. Send a test email from LMS using the configured SES credentials.

2. Confirm the email is received successfully.

Troubleshooting

• Identity not verified → Complete domain/email verification.

• Account in sandbox → Request production access.

• Permission denied → IAM credentials lack SES send permissions.

• DNS verification not propagated → Wait or double-check DNS records.

• SMTP TLS/connection errors → Confirm host, port, and TLS/STARTTLS settings.

• Bounces/complaints → Configure SNS notifications for alerts.

Optional – Set Up Bounce/Complaint Notifications

• In SES, configure an SNS topic for bounces/complaints.

• Subscribe an email or webhook to monitor sending reputation.

Helpful Links

• SES Getting Started: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/setting-up.html

• Verifying a Domain: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/verify-domains.html

• Creating SMTP Credentials: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/smtp-credentials.html

• Requesting Production Access: https://docs.aws.amazon.com/ses/latest/DeveloperGuide/request-production-access.html