docs

Connecting Amazon SES

Set up your Amazon SES credentials so Sendra can send email on your behalf.

Sendra sends email through your own Amazon SES account. This gives you full control over your sending infrastructure and means Amazon bills you directly for delivery at its own rates — typically $0.10 per 1,000 emails — with no markup from Sendra.

IAM setup

Create a dedicated IAM user for Sendra and paste its credentials in during onboarding (or later in Settings → AWS). Sendra stores them encrypted in your workspace.

  1. Open the IAM Console in AWS
  2. Create a new IAM user (e.g., sendra-ses)
  3. Attach a policy with these permissions:
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "ses:SendEmail",
        "ses:SendRawEmail",
        "ses:GetSendStatistics",
        "ses:GetSendQuota"
      ],
      "Resource": "*"
    }
  ]
}
  1. Create an access key for the user
  2. Paste the access key ID and secret into Sendra's Settings → AWS page

Testing your connection

After entering credentials, Sendra sends a test email to verify everything works. You'll see a success confirmation or a specific error message if something is wrong.

Common issues:

ProblemFix
AccessDeniedIAM user is missing ses:SendEmail permission
MessageRejectedSES is in sandbox mode and recipient isn't verified
InvalidClientTokenIdAccess key is incorrect or was deleted

Where credentials are stored

Credentials you enter in Settings are stored encrypted, scoped to your workspace. Each workspace can connect a different AWS account, so agencies and multi-brand teams keep sending fully isolated.

Region

SES is region-specific. Sendra defaults to us-east-1. If your SES lives in a different region, set it in Settings.

Make sure your domain is verified in the same SES region you configure in Sendra. A domain verified in eu-west-1 won't work if Sendra is configured for us-east-1.

On this page