Skip to main content
Version: 2.1

ISESV2DkimSigningAttributes

Interface in AWS.SESV2

Interface for DkimSigningAttributes configuration.

Properties​

DomainSigningAttributesOrigin​

property DomainSigningAttributesOrigin: string

Specifies how the DKIM keys are managed for this identity.

Determines the source of the DKIM signing configuration and key management approach. For CreateEmailIdentity operations, this can include region-specific replication using Deterministic Easy-DKIM (DEED) to maintain consistent DKIM signatures across regions. Basic configuration options:

  • AWS_SES – Amazon SES generates and manages the DKIM keys automatically (Easy DKIM).
  • EXTERNAL – You provide and manage your own DKIM keys (Bring Your Own DKIM). Region-specific replication options use Deterministic Easy-DKIM (DEED) to replicate DKIM configuration from a parent identity in the specified region. This ensures consistent DKIM signatures when the same domain is used across multiple AWS regions:
  • AWS_SES_US_EAST_1 – Replicate from US East (N. Virginia).
  • AWS_SES_US_EAST_2 – Replicate from US East (Ohio).
  • AWS_SES_US_WEST_1 – Replicate from US West (N. California).
  • AWS_SES_US_WEST_2 – Replicate from US West (Oregon).
  • AWS_SES_EU_WEST_1 – Replicate from Europe (Ireland).
  • AWS_SES_EU_WEST_2 – Replicate from Europe (London).
  • AWS_SES_EU_WEST_3 – Replicate from Europe (Paris).
  • AWS_SES_EU_CENTRAL_1 – Replicate from Europe (Frankfurt).
  • AWS_SES_EU_CENTRAL_2 – Replicate from Europe (Zurich).
  • AWS_SES_EU_NORTH_1 – Replicate from Europe (Stockholm).
  • AWS_SES_EU_SOUTH_1 – Replicate from Europe (Milan).
  • AWS_SES_AP_NORTHEAST_1 – Replicate from Asia Pacific (Tokyo).
  • AWS_SES_AP_NORTHEAST_2 – Replicate from Asia Pacific (Seoul).
  • AWS_SES_AP_NORTHEAST_3 – Replicate from Asia Pacific (Osaka).
  • AWS_SES_AP_SOUTHEAST_1 – Replicate from Asia Pacific (Singapore).
  • AWS_SES_AP_SOUTHEAST_2 – Replicate from Asia Pacific (Sydney).
  • AWS_SES_AP_SOUTHEAST_3 – Replicate from Asia Pacific (Jakarta).
  • AWS_SES_AP_SOUTH_1 – Replicate from Asia Pacific (Mumbai).
  • AWS_SES_AP_SOUTH_2 – Replicate from Asia Pacific (Hyderabad).
  • AWS_SES_AF_SOUTH_1 – Replicate from Africa (Cape Town).
  • AWS_SES_CA_CENTRAL_1 – Replicate from Canada (Central).
  • AWS_SES_SA_EAST_1 – Replicate from South America (São Paulo).
  • AWS_SES_ME_CENTRAL_1 – Replicate from Middle East (UAE).
  • AWS_SES_ME_SOUTH_1 – Replicate from Middle East (Bahrain).
  • AWS_SES_IL_CENTRAL_1 – Replicate from Israel (Tel Aviv). Note: Availability of region-specific options depends on the operation context. For PutEmailIdentityDkimSigningAttributes, use the SigningAttributesOrigin parameter instead.

DomainSigningPrivateKey​

property DomainSigningPrivateKey: string

Specifies a private key that's used to generate a DKIM signature when using "Bring Your Own DKIM".

The private key must use 1024 or 2048 RSA encryption and be Base64 encoded. Minimum length 1, maximum length 20480.

DomainSigningSelector​

property DomainSigningSelector: string

Specifies the location of a public key in the DNS configuration for a domain when using "Bring Your Own DKIM".

Minimum length 1, maximum length 63.

NextSigningKeyLength​

property NextSigningKeyLength: string

Specifies the key length of the future DKIM key pair to be generated when using "Easy DKIM".

This can be changed at most once per day. Valid values: RSA_1024_BIT | RSA_2048_BIT.