title: AWS SES Identity "pending verification" for DKIM config
body: <p>Brand new to AWS &amp; Simple Email Service (SES) and have an app that needs to generate some email using SES. All I'm trying to do is set things up so that my app's service user (called, say, <code>myapp-dev</code>) has Access &amp; Secret Keys that have permission to use SES APIs for generating emails. Furthermore I need these SES-generated emails to be sent from <em>either</em> <code>no-reply@myapp.example.com</code> which is <strong>not</strong> a valid email address, as well as <code>hello@myapp.example.com</code> which <strong>is</strong> a valid email address. This is because some SES emails will be alerts/notifications that end users should not respond to, and other emails will be emails that they may very well want/need to reply to.</p>
  
  <p>I've already created a <code>myapp-dev</code> user that has <code>AmazonSESFullAccess</code> permissions.</p>
  
  <p>Not knowing any better, I then went to the SES dashboard and clicked <strong>Manage Identities</strong> and started creating a new "<em>SES Identity</em>". <strong>I'm not sure if I need to do this or not (given my needs) or whether my <code>myapp-dev</code> user is ready to use the SES APIs as-is.</strong> Adding this new SES identity, it asked me to enter my domain and gave me the option to generate DKIM configurations for that domain. I read up quickly on DKIM and it <em>sounds</em> like its a way to authenticate that emails did in fact come from my domain, so it sounds like its something I'd like leverage. So I generated DKIM configs and now SES says that my new identity has a status of "<em>pending verification</em>".</p>
  
  <ul>
  <li>Main concern is bolded above: with <code>AmazonSESFullAccess</code> permission, is my <code>myapp-dev</code> user ready to rock n' roll? Or will SES APIs fail/refuse to send emails until my SES identity (for my domain) is "verified"?</li>
  <li>What do I actually need to do to change the SES identity from "pending" to "verified"? I did see a note that I needed to modify TXT and CNAME DNS records to configure DKIM with my domain, is that it? Or do I need to do something else?</li>
  </ul>
  
  <p>Thank in advance for any and all clarification!</p>