Amazon SES - Domain Verification Pending

Question

I am trying to setup Amazon SES on my Route53 domain (writeurl.com). The domain verification status remains at pending verification and does not proceed. The following nslookup command does not show anything, even though the records are created in Route53 hosted zone.

nslookup -type=txt _amazonses.writeurl.com

What am I doing wrong here? Following are the Route53 records:

There are other records that also do not match, like the `MX` (showing GSuite servers, not SES). Are you sure the above screenshot is current, as it does not appear to match what records are currently present in more ways than just the _amazonses `TXT` record? — Håkan Lindqvist, Aug 25 '21 at 15:39
That's the only wildcard record I see above. Did you have even more of them? — Michael Hampton, Aug 26 '21 at 15:37
No, its the only one. So its there to handle www.writeurl.com — Haris ur Rehman, Aug 26 '21 at 18:42
Do you really need a wildcard record? They're not generally a good idea, and I'd recommend you get rid of it and put in the actual records you need. — Michael Hampton, Aug 29 '21 at 11:57

score 0 · Answer 1 · answered Sep 03 '21 at 22:07

For some reason, the DNS record you are modifying is not current. You need to talk to Amazon and figure out why the records shown in Route53 are not the same as the records exposed to the Internet.

If I do an nslookup -type=SOA on writeurl.com I see the SOA for that domain is ns-232.awsdns-29.com. Your screenshot shows SOA is ns-696.awsdns-23.net. I would think that was an alias, but the TXT record you show in your screenshot for google site verification does not match what's exposed to an nslookup from here, and doing a lookup of your MX records here shows three, none of which match the one in your screenshot. SES can't use that string to validate because it can't see it.

Amazon SES - Domain Verification Pending

1 Answers1