Setting Up SES

First, go to IAM and create a new user named {appname}-{env}-ses. Select "Programmatic access" as the access type.

In permissions, choose to attach an existing policy directly. Give the user the AmazonSESFullAccess policy.

After the next step, you will be provided the new user's access key ID and secret access key. Copy these values into the server's config.js mail.ses section.

Review and create the user.

Now, go to SES. Go to "Domains", and click "Verify a New Domain". Enter the domain you will use, and make sure "Generate DKIM Settings" is checked.

Copy all of the DNS records into your DNS provider for the domain you are verifying.

Once you are done updating your DNS, click here to get out of the SES sandbox. You'll have to wait until your support request is approved before you can send emails from the app.