A few weeks ago we teased that fully managed email sending was in active development. It’s here. If you’ve ever set up email sending before, you know the drill: register a domain with your provider, add DKIM and SPF records, wait for verification, configure bounce and complaint handling, and hope nothing on someone else’s account drags your sender reputation down with it. We just removed almost all of that.
One-Click Email Infrastructure, Fully Isolated Per Account
Every account that opts into fully managed email now gets its own dedicated sending environment on Amazon SES — automatically. Behind the scenes, we provision an isolated SES tenant for your account, complete with its own sending identity, its own event tracking, and its own suppression list. You get a real mailbox-grade setup without ever touching an AWS console.
Because each account’s tenant is fully isolated, your sending reputation stands on its own. A spike in bounces or complaints on another account’s campaigns has no effect on your deliverability — and vice versa. That isolation is the whole point of going fully managed: predictable, protected sending without needing a dedicated AWS account of your own.
Domain Verification Without the Manual DNS Dance
Setting up DKIM used to mean generating keys, finding the right CNAME records, and adding them to your DNS provider by hand. Now, as soon as your domain is added, we generate the DKIM signing keys and verification records automatically and surface the exact CNAME entries you need to add. Once your DNS provider reflects them, verification completes on its own — no more guessing whether a record is formatted correctly.
Bounces and Complaints Handled Automatically
Every tenant comes with suppression built in from day one. Addresses that bounce or complain are automatically suppressed from future sends on your account — you don’t need to build or maintain your own suppression list, and you don’t need to worry about re-sending to someone who already marked a message as spam.
Real-Time Delivery Events, Already Wired Up
Delivery, bounce, and complaint events from SES are automatically routed back into the platform the moment your tenant is provisioned — no manual webhook configuration, no SNS topics to create yourself. That means the sending status and engagement data you see in campaigns reflects what’s actually happening in near real time.
Reputation Monitoring for Every Sending Setup
Whether you’re on fully managed email or you’re still sending through your own connected AWS account, we now track the health of your sending reputation continuously: current sending status (enabled, paused, or enforced by AWS), plus rolling bounce and complaint rates. If your sending ever gets paused or restricted, you’ll know immediately instead of finding out when a campaign quietly stops delivering.
Built to Be Reliable, Not Just Convenient
Provisioning a tenant touches several AWS resources — an identity, a configuration set, an SNS topic, suppression settings — and every one of those steps is idempotent. If a provisioning run is interrupted, retrying it picks up exactly where it left off rather than creating duplicate or conflicting resources. You shouldn’t have to think about any of this, and now you don’t.
Have feedback on any of these changes, or a feature you’d like to see next? Reach out to your account team — we’d love to hear from you.