---
title: "GET /v2/email/identities/{EmailIdentity}"
method: GET
path: "/v2/email/identities/{EmailIdentity}"
---

# GET /v2/email/identities/{EmailIdentity}

`GET /v2/email/identities/{EmailIdentity}`

Provides information about a specific identity, including the identity's verification status, sending authorization policies, its DKIM authentication status, and its custom Mail-From settings.

## Path parameters

- `EmailIdentity` string, required

## Response `200`

Success

- GetEmailIdentityResponse — Details about an email identity.
  - `IdentityType` 'EMAIL_ADDRESS' | 'DOMAIN' | 'MANAGED_DOMAIN' — The email identity type. Note: the <code>MANAGED_DOMAIN</code> identity type is not supported.
  - `FeedbackForwardingStatus` boolean — <p>The feedback forwarding configuration for the identity.</p> <p>If the value is <code>true</code>, you receive email notifications when bounce or complaint events occur. These notifications are sent to the address that you specified in the <code>Return-Path</code> header of the original email.</p> <p>You're required to have a method of tracking bounces and complaints. If you haven't set up another mechanism for receiving bounce or complaint notifications (for example, by setting up an event destination), you receive an email notification when these events occur (even if this setting is disabled).</p>
  - `VerifiedForSendingStatus` boolean — Specifies whether or not the identity is verified. You can only send email from verified email addresses or domains. For more information about verifying identities, see the <a href="https://docs.aws.amazon.com/pinpoint/latest/userguide/channels-email-manage-verify.html">Amazon Pinpoint User Guide</a>.
  - `DkimAttributes` object — An object that contains information about the DKIM attributes for the identity.
    - `SigningEnabled` boolean — If the value is <code>true</code>, then the messages that you send from the identity are signed using DKIM. If the value is <code>false</code>, then the messages that you send from the identity aren't DKIM-signed.
    - `Status` 'PENDING' | 'SUCCESS' | 'FAILED' | 'TEMPORARY_FAILURE' | 'NOT_STARTED' — <p>Describes whether or not Amazon SES has successfully located the DKIM records in the DNS records for the domain. The status can be one of the following:</p> <ul> <li> <p> <code>PENDING</code> – The verification process was initiated, but Amazon SES hasn't yet detected the DKIM records in the DNS configuration for the domain.</p> </li> <li> <p> <code>SUCCESS</code> – The verification process completed successfully.</p> </li> <li> <p> <code>FAILED</code> – The verification process failed. This typically occurs when Amazon SES fails to find the DKIM records in the DNS configuration of the domain.</p> </li> <li> <p> <code>TEMPORARY_FAILURE</code> – A temporary issue is preventing Amazon SES from determining the DKIM authentication status of the domain.</p> </li> <li> <p> <code>NOT_STARTED</code> – The DKIM verification process hasn't been initiated for the domain.</p> </li> </ul>
    - `Tokens` DnsToken[] — <p>If you used <a href="https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html">Easy DKIM</a> to configure DKIM authentication for the domain, then this object contains a set of unique strings that you use to create a set of CNAME records that you add to the DNS configuration for your domain. When Amazon SES detects these records in the DNS configuration for your domain, the DKIM authentication process is complete.</p> <p>If you configured DKIM authentication for the domain by providing your own public-private key pair, then this object contains the selector for the public key.</p> <p>Regardless of the DKIM authentication method you use, Amazon SES searches for the appropriate records in the DNS configuration of the domain for up to 72 hours.</p>
    - `SigningAttributesOrigin` 'AWS_SES' | 'EXTERNAL' — <p>A string that indicates how DKIM was configured for the identity. These are the possible values:</p> <ul> <li> <p> <code>AWS_SES</code> – Indicates that DKIM was configured for the identity by using <a href="https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html">Easy DKIM</a>.</p> </li> <li> <p> <code>EXTERNAL</code> – Indicates that DKIM was configured for the identity by using Bring Your Own DKIM (BYODKIM).</p> </li> </ul>
    - `NextSigningKeyLength` 'RSA_1024_BIT' | 'RSA_2048_BIT' — [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day.
    - `CurrentSigningKeyLength` 'RSA_1024_BIT' | 'RSA_2048_BIT' — [Easy DKIM] The key length of the DKIM key pair in use.
    - `LastKeyGenerationTimestamp` string, date-time — [Easy DKIM] The last time a key pair was generated for this identity.
  - `MailFromAttributes` object — An object that contains information about the Mail-From attributes for the email identity.
    - `MailFromDomain` string, required — The name of a domain that an email identity uses as a custom MAIL FROM domain.
    - `MailFromDomainStatus` 'PENDING' | 'SUCCESS' | 'FAILED' | 'TEMPORARY_FAILURE', required — <p>The status of the MAIL FROM domain. This status can have the following values:</p> <ul> <li> <p> <code>PENDING</code> – Amazon SES hasn't started searching for the MX record yet.</p> </li> <li> <p> <code>SUCCESS</code> – Amazon SES detected the required MX record for the MAIL FROM domain.</p> </li> <li> <p> <code>FAILED</code> – Amazon SES can't find the required MX record, or the record no longer exists.</p> </li> <li> <p> <code>TEMPORARY_FAILURE</code> – A temporary issue occurred, which prevented Amazon SES from determining the status of the MAIL FROM domain.</p> </li> </ul>
    - `BehaviorOnMxFailure` 'USE_DEFAULT_VALUE' | 'REJECT_MESSAGE', required — <p>The action to take if the required MX record can't be found when you send an email. When you set this value to <code>USE_DEFAULT_VALUE</code>, the mail is sent using <i>amazonses.com</i> as the MAIL FROM domain. When you set this value to <code>REJECT_MESSAGE</code>, the Amazon SES API v2 returns a <code>MailFromDomainNotVerified</code> error, and doesn't attempt to deliver the email.</p> <p>These behaviors are taken when the custom MAIL FROM domain configuration is in the <code>Pending</code>, <code>Failed</code>, and <code>TemporaryFailure</code> states.</p>
  - `Policies` object — A map of policy names to policies.
  - `Tags` Tag[] — An array of objects that define the tags (keys and values) that are associated with the email identity.
    - `Key` string, required — One part of a key-value pair that defines a tag. The maximum length of a tag key is 128 characters. The minimum length is 1 character.
    - `Value` string, required — The optional part of a key-value pair that defines a tag. The maximum length of a tag value is 256 characters. The minimum length is 0 characters. If you don't want a resource to have a specific tag value, don't specify a value for this parameter. If you don't specify a value, Amazon SES sets the value to an empty string.
  - `ConfigurationSetName` string — The configuration set used by default when sending from this identity.
  - `VerificationStatus` 'PENDING' | 'SUCCESS' | 'FAILED' | 'TEMPORARY_FAILURE' | 'NOT_STARTED' — <p>The verification status of the identity. The status can be one of the following:</p> <ul> <li> <p> <code>PENDING</code> – The verification process was initiated, but Amazon SES hasn't yet been able to verify the identity.</p> </li> <li> <p> <code>SUCCESS</code> – The verification process completed successfully.</p> </li> <li> <p> <code>FAILED</code> – The verification process failed.</p> </li> <li> <p> <code>TEMPORARY_FAILURE</code> – A temporary issue is preventing Amazon SES from determining the verification status of the identity.</p> </li> <li> <p> <code>NOT_STARTED</code> – The verification process hasn't been initiated for the identity.</p> </li> </ul>

## Other responses

- `480` — NotFoundException
- `481` — TooManyRequestsException
- `482` — BadRequestException

---

[API](https://skmtc.net/aws/apis/sesv2.md) · [All operations](https://skmtc.net/aws/apis/sesv2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/sesv2/versions/25eba06e7f64/schema)