Skip to main content
An Amazon SES sending account asks for an Access key ID, a Secret access key, the Region and a Configuration set. Keys you save are stored encrypted and never shown again.

Access key ID and secret access key

1

Create an IAM user

In the AWS console, open IAM → Users → Create user. Give it a name such as “elasticfunnels-ses”. It does not need console access.
2

Give it SES permissions

Attach a policy that allows ses:SendEmail and ses:GetAccount. ElasticFunnels checks the key with GetAccount when you save and sends with SendEmail.
3

Create the access key

Open the user, go to the Security credentials tab and click Create access key. Copy the Access key ID and the Secret access key. AWS shows the secret only once.
4

Paste both in ElasticFunnels

Paste them into Access key ID and Secret access key.
If you already use SES over SMTP, the SMTP password from SES → SMTP settings → Create SMTP credentials also works as the Secret access key, with the SMTP user name as the Access key ID. AWS guides: Create an IAM user, Manage access keys, SES SMTP credentials.

Region

Pick the region your SES identities (verified domains and addresses) are in. It shows in the top right of the SES console. Identities are per region, so a domain verified in us-east-1 cannot send from eu-west-1.

Configuration set

Opens, clicks and bounces need a configuration set that sends events to Amazon SNS. Create it under SES → Configuration sets, then follow Amazon SES: three steps in AWS. See also Connect Amazon SES.