> ## Documentation Index
> Fetch the complete documentation index at: https://auth0.generaltranslation.app/llms.txt
> Use this file to discover all available pages before exploring further.

> Describes how to configure Amazon Simple Email Service (SES) as an external email provider so you can manage, monitor, and troubleshoot your email communications.

# Configure Amazon SES as External SMTP Email Provider

Auth0 allows you to configure your own SMTP email provider so you can more completely manage, monitor, and troubleshoot your email communications. Auth0's built-in email infrastructure should be used for testing emails only.

## Prerequisites

* To ensure that emails can be sent from Auth0 to your SMTP, open ports and allow inbound connections from specific IP addresses. To update the list of IPs, navigate to [Dashboard > Branding > Email Provider](https://manage.auth0.com/#/branding/email_provider). See [Add IP Addresses to AllowList](/docs/secure/security-guidance/data-security/allowlist) for details.
* You must have an [Amazon AWS](http://aws.amazon.com/ses/) account.
* Determine which credentials you want to use: API or SMTP. For more info about SES credentials, see Amazon's [Using Credentials With Amazon SES](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/using-credentials.html).

## Configure Amazon SES with API credentials

1. Log in to your [Amazon AWS](http://aws.amazon.com/ses/) account.

2. [Verify your domain](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/verify-domains.html).

3. [Verify email addresses](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/verify-email-addresses.html)

4. [Request production access](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/request-production-access.html?icmpid=docs_ses_console).

5. [Get your AWS access keys](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/get-aws-keys.html). Copy these keys; you will need to enter these values into Auth0.

6. [Attach a policy with the proper permissions](http://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage.html). Attach a policy with the `ses:SendRawEmail` and `ses:SendEmail` permissions, as in this example:

   ```json lines theme={null}
   {
       "Version": "2012-10-17",
       "Statement": [
           {
               "Effect": "Allow",
               "Action": [
                   "ses:SendRawEmail",
                   "ses:SendEmail"
               ],
               "Resource": "*"
           }
       ]
   }
   ```

7. Navigate to Auth0 [Dashboard > Branding > Email Provider](https://manage.auth0.com/#/branding/email_provider).

8. Activate the **Use my own email provider** toggle.

9. Click the **Amazon Web Services** logo.

10. Provide a **From** email address, enter your AWS **Access Key Id** and **Secret Access Key**, select your **Region**.

11. Click **Save**.

### Configure Amazon SES with SMTP credentials

1. Sign up for an [Amazon AWS](http://aws.amazon.com/ses/) account, or log in.
2. [Verify your domain](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/verify-domains.html).
3. [Request production access](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/request-production-access.html?icmpid=docs_ses_console).
4. [Get your SMTP credentials](http://docs.aws.amazon.com/ses/latest/DeveloperGuide/smtp-credentials.html). Copy the security credentials; you will need to enter these values into Auth0.
5. Navigate to [Dashboard > Emails > Custom Email Providers](https://manage.auth0.com/#/emails/provider).
6. Activate the **Use my own email provider** toggle.
7. Click the **SMTP** logo.
8. Provide a **From** email address, then enter your SMTP server **Host**, **Port**, **Username**, and **Password**, and click **Save**. You can use `email-smtp.us-east-1.amazonaws.com` (using the appropriate region rather than `us-east-1`) for **Host** and `587` for **Port**.

## Test email

You can now send a test email using the **Send Test Email** button. If you have configured everything correctly, you will receive a confirmation email. If you do not receive an email after a few minutes, please check your [Auth0 logs](https://manage.auth0.com/#/logs) for any failures.

The [Amazon SES console](https://console.aws.amazon.com/ses) will now display delivery insights for all emails that have been sent to your users.