Email sending infrastructure vs email authentication diagnostics - what each one does and when you need both.
Short answer: Amazon SES (Simple Email Service) is a high-volume email sending API built for developers and AWS users.
InboxGreen is an email authentication tool that checks and fixes the DNS records (SPF, DKIM, DMARC) that determine whether emails sent through SES actually reach the inbox.
SES is one of the cheapest ways to send at scale. InboxGreen makes sure the authentication is correct so that scale doesn't go to spam.
What Amazon SES does not handle for you
SES is powerful but hands-off on the authentication side. When you set up a custom sending domain in SES, it provides DKIM records via Easy DKIM, but several things are left entirely to you:
- SPF record - SES does not manage your SPF. You need to add
include:amazonses.com to your SPF record (or use a MAIL FROM subdomain with its own SPF).
- DMARC policy - SES does not set up DMARC. Without DMARC, Gmail and Yahoo will not fully trust your authentication even if SPF and DKIM pass.
- DKIM alignment - If you use SES's default sending domain rather than a verified custom domain, DMARC alignment fails because the From domain doesn't match.
- Sandbox mode - New SES accounts start in sandbox and can only send to verified addresses. Many developers fix authentication issues before or during the sandbox-to-production move.
A free InboxGreen check shows exactly what is set up and what is missing.
search
Check My Domain Free
Frequently asked questions
Does Amazon SES set up SPF automatically?
No. SES provides DKIM signing via Easy DKIM, but SPF configuration is your responsibility.
You need to add include:amazonses.com to your domain's SPF record, or configure a custom MAIL FROM subdomain with its own SPF.
Use the SPF Generator to build the correct record.
My SES domain verification shows verified but emails go to spam - why?
SES domain verification confirms your identity but does not check your full authentication posture.
If DMARC is missing or SPF has issues, emails from verified SES domains can still land in spam.
Run an InboxGreen check to see the complete picture.
What is Amazon SES Easy DKIM?
Easy DKIM is an SES feature that automatically signs outbound emails with DKIM.
It provides 2048-bit RSA keys and generates CNAME records you publish in your DNS.
Once the CNAMEs are live, SES handles key rotation automatically.
Use the DKIM Checker to confirm the CNAME records are resolving correctly.
Is InboxGreen an Amazon SES alternative?
No. InboxGreen does not send emails. It is an email authentication diagnostic tool.
If you are looking for an alternative to Amazon SES's email sending service, look at Postmark, Mailgun, or SendGrid.
If you want to check and fix your authentication records regardless of which platform you use, InboxGreen is the right tool.