AWS SES Setup

Connect your AWS account to enable email delivery through Amazon SES.

Recommended: One-Click AWS Connect

Skip the manual IAM user creation. Use our secure CloudFormation flow to connect in 60 seconds.

Switch to One-Click Connect →

New AWS accounts are in sandbox mode

You can only send to verified email addresses until you request production access.

Create an IAM User

Go to the AWS IAM Console and create a new user.

Name it something like xmit-ses-user
Select Programmatic access (Access Key)

Attach the Required IAM Policy

Create a custom policy with these permissions and attach it to the user:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "XmitSESv2",
      "Effect": "Allow",
      "Action": [
        "ses:GetAccount",
        "ses:SendEmail",
        "ses:CreateEmailIdentity",
        "ses:GetEmailIdentity",
        "ses:DeleteEmailIdentity",
        "ses:PutEmailIdentityMailFromAttributes",
        "ses:PutEmailIdentityFeedbackAttributes",
        "ses:PutEmailIdentityConfigurationSet",
        "ses:CreateConfigurationSet",
        "ses:GetConfigurationSet",
        "ses:DeleteConfigurationSet",
        "ses:PutConfigurationSetSuppressionOptions",
        "ses:CreateConfigurationSetEventDestination",
        "ses:DeleteConfigurationSetEventDestination"
      ],
      "Resource": "*"
    },
    {
      "Sid": "XmitSESv1",
      "Effect": "Allow",
      "Action": [
        "ses:SetIdentityNotificationTopic",
        "ses:SetIdentityFeedbackForwardingEnabled",
        "ses:CreateReceiptRuleSet",
        "ses:SetActiveReceiptRuleSet",
        "ses:DescribeActiveReceiptRuleSet",
        "ses:CreateReceiptRule",
        "ses:UpdateReceiptRule",
        "ses:DeleteReceiptRule"
      ],
      "Resource": "*"
    },
    {
      "Sid": "XmitSNS",
      "Effect": "Allow",
      "Action": [
        "sns:CreateTopic",
        "sns:DeleteTopic",
        "sns:Subscribe",
        "sns:Unsubscribe",
        "sns:SetTopicAttributes",
        "sns:GetTopicAttributes",
        "sns:GetSubscriptionAttributes",
        "sns:ListSubscriptionsByTopic"
      ],
      "Resource": "arn:aws:sns:*:*:Xmit-*"
    },
    {
      "Sid": "XmitS3",
      "Effect": "Allow",
      "Action": [
        "s3:CreateBucket",
        "s3:PutBucketPolicy",
        "s3:GetBucketPolicy",
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::xmit-*",
        "arn:aws:s3:::xmit-*/*"
      ]
    }
  ]
}

Generate Access Keys

After creating the user:

Go to the user's Security credentials tab
Click Create access key
Copy the Access Key ID and Secret Access Key

Enter Credentials in Xmit

Go to Dashboard → Settings and paste your credentials in the AWS Infrastructure section.

Request Production Access (Optional)