--- title: "POST /v2/email/identities" method: POST path: "/v2/email/identities" --- # POST /v2/email/identities `POST /v2/email/identities` Starts the process of verifying an email identity. An _identity_ is an email address or domain that you use when you send email. Before you can use an identity to send email, you first have to verify it. By verifying an identity, you demonstrate that you're the owner of the identity, and that you've given Amazon SES API v2 permission to send email from the identity. When you verify an email address, Amazon SES sends an email to the address. Your email address is verified as soon as you follow the link in the verification email. When you verify a domain without specifying the `DkimSigningAttributes` object, this operation provides a set of DKIM tokens. You can convert these tokens into CNAME records, which you then add to the DNS configuration for your domain. Your domain is verified when Amazon SES detects these records in the DNS configuration for your domain. This verification method is known as [Easy DKIM](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/easy-dkim.html). Alternatively, you can perform the verification process by providing your own public-private key pair. This verification method is known as Bring Your Own DKIM (BYODKIM). To use BYODKIM, your call to the `CreateEmailIdentity` operation has to include the `DkimSigningAttributes` object. When you specify this object, you provide a selector (a component of the DNS record name that identifies the public key to use for DKIM authentication) and a private key. When you verify a domain, this operation provides a set of DKIM tokens, which you can convert into CNAME tokens. You add these CNAME tokens to the DNS configuration for your domain. Your domain is verified when Amazon SES detects these records in the DNS configuration for your domain. For some DNS providers, it can take 72 hours or more to complete the domain verification process. Additionally, you can associate an existing configuration set with the email identity that you're verifying. ## Request body - object - `EmailIdentity` string, required — The email address or domain to verify. - `Tags` Tag[] — An array of objects that define the tags (keys and values) to associate with the email identity. - `Key` string, required — One part of a key-value pair that defines a tag. The maximum length of a tag key is 128 characters. The minimum length is 1 character. - `Value` string, required — The optional part of a key-value pair that defines a tag. The maximum length of a tag value is 256 characters. The minimum length is 0 characters. If you don't want a resource to have a specific tag value, don't specify a value for this parameter. If you don't specify a value, Amazon SES sets the value to an empty string. - `DkimSigningAttributes` object — An object that contains configuration for Bring Your Own DKIM (BYODKIM), or, for Easy DKIM - `DomainSigningSelector` string — [Bring Your Own DKIM] A string that's used to identify a public key in the DNS configuration for a domain. - `DomainSigningPrivateKey` string, password —

[Bring Your Own DKIM] A private key that's used to generate a DKIM signature.

The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding.

- `NextSigningKeyLength` 'RSA_1024_BIT' | 'RSA_2048_BIT' — [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day. - `ConfigurationSetName` string —

The name of a configuration set.

Configuration sets are groups of rules that you can apply to the emails you send. You apply a configuration set to an email by including a reference to the configuration set in the headers of the email. When you apply a configuration set to an email, all of the rules in that configuration set are applied to the email.

## Response `200` Success - CreateEmailIdentityResponse —

If the email identity is a domain, this object contains information about the DKIM verification status for the domain.

If the email identity is an email address, this object is empty.

- `IdentityType` 'EMAIL_ADDRESS' | 'DOMAIN' | 'MANAGED_DOMAIN' — The email identity type. Note: the MANAGED_DOMAIN identity type is not supported. - `VerifiedForSendingStatus` boolean — Specifies whether or not the identity is verified. You can only send email from verified email addresses or domains. For more information about verifying identities, see the Amazon Pinpoint User Guide. - `DkimAttributes` object — An object that contains information about the DKIM attributes for the identity. - `SigningEnabled` boolean — If the value is true, then the messages that you send from the identity are signed using DKIM. If the value is false, then the messages that you send from the identity aren't DKIM-signed. - `Status` 'PENDING' | 'SUCCESS' | 'FAILED' | 'TEMPORARY_FAILURE' | 'NOT_STARTED' —

Describes whether or not Amazon SES has successfully located the DKIM records in the DNS records for the domain. The status can be one of the following:

- `Tokens` DnsToken[] —

If you used Easy DKIM to configure DKIM authentication for the domain, then this object contains a set of unique strings that you use to create a set of CNAME records that you add to the DNS configuration for your domain. When Amazon SES detects these records in the DNS configuration for your domain, the DKIM authentication process is complete.

If you configured DKIM authentication for the domain by providing your own public-private key pair, then this object contains the selector for the public key.

Regardless of the DKIM authentication method you use, Amazon SES searches for the appropriate records in the DNS configuration of the domain for up to 72 hours.

- `SigningAttributesOrigin` 'AWS_SES' | 'EXTERNAL' —

A string that indicates how DKIM was configured for the identity. These are the possible values:

- `NextSigningKeyLength` 'RSA_1024_BIT' | 'RSA_2048_BIT' — [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day. - `CurrentSigningKeyLength` 'RSA_1024_BIT' | 'RSA_2048_BIT' — [Easy DKIM] The key length of the DKIM key pair in use. - `LastKeyGenerationTimestamp` string, date-time — [Easy DKIM] The last time a key pair was generated for this identity. ## Other responses - `480` — AlreadyExistsException - `481` — LimitExceededException - `482` — TooManyRequestsException - `483` — BadRequestException - `484` — ConcurrentModificationException - `485` — NotFoundException --- [API](https://skmtc.net/aws/apis/sesv2.md) · [All operations](https://skmtc.net/aws/apis/sesv2/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/sesv2/versions/25eba06e7f64/schema)