How can I create SMTP credentials to use with Amazon SES? How can I authenticate to Amazon SES using SMTP credentials?

Last updated: 2020-04-24

I want to create Simple Mail Transfer Protocol (SMTP) credentials that I can use with Amazon Simple Email Service (Amazon SES) SMTP endpoints. Then, I want to authenticate to Amazon SES using the SMTP credentials. How can I do that?


To create credentials for the Amazon SES SMTP interface, follow these steps:

Note: The credentials for the Amazon SES SMTP interface are different from the access keys that you create using AWS Identity and Access Management (IAM) for an SMTP user. To rotate your SMTP credentials, you can either create new SMTP credentials or convert your existing secret access key into the Amazon SES SMTP format.

  1. Open the Amazon SES console.
    Important: The IAM user or role that you use to create the SMTP credentials must have permissions for iam:ListUsers, iam:CreateUser, iam:CreateAccessKey, and iam:PutUserPolicy.
  2. Because SMTP credentials are Regional, confirm you're in the correct Region. Review the AWS Region selector in the navigation bar.
  3. From the navigation pane, under Email Sending, choose SMTP Settings.
  4. Choose Create My SMTP Credentials.
  5. After the new page loads, review the value in IAM User Name. You can accept the default value, or you can change it.
  6. Choose Create.
  7. Choose Download Credentials. This is the only time that you're able to download the SMTP credentials for this user.

By default, SMTP users are created with permissions for sending raw messages (ses:SendRawEmail). You can modify the SMTP user's permissions using IAM. For more information on Amazon SES permissions, see Controlling Access to Amazon SES.

After you create the SMTP credentials, you can configure these credentials to authenticate to Amazon SES depending on your email-sending method:

Did this article help you?

Anything we could improve?

Need more help?