How to Buy AWS SES Accounts for Email Marketing: Complete Guide 2026

By Viktor Kuznetsov

Performance Marketing Specialists Reviewed by Senior Media Buyers

Published April 15, 2026

16 min read · Email

Amazon Simple Email Service (SES) is the most cost-effective email sending infrastructure available, at just £0.10 per 1,000 emails. It powers the email operations of companies like Netflix, Reddit, and Duolingo, handling billions of emails daily with industry-leading deliverability. But getting a properly configured SES account with production access isn't trivial.

This guide covers everything about buying and setting up AWS SES accounts for email marketing, from sandbox exit and production access to IP warming, deliverability optimisation, and compliance with email marketing regulations.

Why AWS SES for Email Marketing

AWS SES is built on the same infrastructure that Amazon uses for its own email operations, handling trillions of emails annually with 99.9% uptime. The service integrates natively with the AWS ecosystem (Lambda, SNS, CloudWatch, S3), enabling automated email workflows, real-time analytics, and event-driven email triggers at scale.

For marketers and agencies sending high volumes, SES's cost advantage is transformative. A campaign sending 1 million emails per month costs approximately £100 on SES versus £800 to £200+ on commercial platforms, without sacrificing deliverability or features.

Account Setup & Production Access

Sandbox Mode (Default)

All new AWS SES accounts start in sandbox mode with these restrictions:

• Can only send to verified email addresses (you must manually verify each recipient)
• Maximum 200 emails per 24-hour period
• Maximum 1 email per second send rate
• "From" address must be verified

Production Access

To remove sandbox restrictions, you must request production access through the AWS Support Center. This requires:

1. Use case description: Explain what types of emails you'll send (transactional, marketing, newsletters) and how you build your recipient lists.
2. Sending volume estimate: Provide expected daily or monthly volume. AWS uses this to set initial sending limits.
3. Bounce and complaint handling: Describe how you'll handle bounced emails and complaints. AWS requires SNS notifications for bounces and complaints.
4. Unsubscribe mechanism: Explain how recipients can opt out. Include example of unsubscribe process.

Production access approval typically takes 24 to 48 hours. Accounts from Unled Network come with production access already configured, eliminating this waiting period.

Pricing & Account Options

IP Warming Strategy

If your SES account uses dedicated IP addresses, proper IP warming is essential for deliverability. Here's the recommended warming schedule:

Deliverability Optimisation

• List hygiene: Verify email addresses before adding to your sending list. Remove hard bounces immediately and suppress soft bounces after 3 consecutive failures. Use services like ZeroBounce or NeverBounce for bulk verification.
• Engagement-based sending: Segment your list by engagement level. Send to your most engaged subscribers first, this builds positive reputation with ISPs that improves deliverability for broader sends.
• Content optimisation: Avoid spam trigger words, maintain a healthy text-to-image ratio, include plain-text alternatives, and use consistent 'From' name and address. Test emails with tools like Mail Tester before sending to your full list.
• Send time optimisation: Distribute sends across time windows rather than blasting entire lists simultaneously. Gradual sending patterns look more natural to ISPs and improve inbox placement.
• Feedback loops: Set up SES complaint notifications via SNS and automatically suppress addresses that report spam. Major ISPs provide feedback loops through AWS SES automatically.

Email Authentication (SPF, DKIM, DMARC)

Proper authentication is non-negotiable for deliverability in 2026. Gmail, Yahoo, and Microsoft now require authentication for bulk senders:

SPF (Sender Policy Framework)

Authorise AWS SES to send on behalf of your domain by adding an SPF record to your DNS. For SES, include include:amazonses.com in your SPF TXT record.

DKIM (DomainKeys Identified Mail)

SES provides Easy DKIM setup, generate DKIM keys in the SES console and add three CNAME records to your domain's DNS. DKIM cryptographically signs your emails, proving they haven't been tampered with in transit.

DMARC (Domain-based Message Authentication)

Publish a DMARC policy that tells receiving servers what to do with emails that fail SPF/DKIM checks. Start with p=none for monitoring, then move to p=quarantine or p=reject as you confirm all legitimate email sources pass authentication.

Compliance & Best Practices

• CAN-SPAM compliance: Include physical mailing address, clear sender identification, honest subject lines, and working unsubscribe links in every marketing email. Process unsubscribe requests within 10 business days.
• GDPR compliance: For EU recipients, obtain explicit consent before sending marketing emails. Maintain records of consent and provide easy data access and deletion mechanisms.
• AWS Acceptable Use Policy: SES prohibits sending to purchased or rented email lists, spoofing sender addresses, and sending emails that generate excessive bounces or complaints. Violations result in account suspension.

For managed email infrastructure, see our Email Marketing Services and AWS SES Accounts.

Frequently Asked Questions