# EmailIdentityProps

Properties for an email identity.

Extends: EmailIdentityProps
Used as props by: EmailIdentity

- Source: [`aws-ses/lib/email-identity.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-ses/lib/email-identity.ts#L55)
- Type last changed: v2.235.0 · 15 Jan 2026

## Example

```ts
import * as iam from 'aws-cdk-lib/aws-iam';
declare const user: iam.User;

const identity = new ses.EmailIdentity(this, 'Identity', {
  identity: ses.Identity.domain('cdk.dev'),
});

identity.grantSendEmail(user);
```

## Properties

- `configurationSet`: [IConfigurationSetRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_ses.IConfigurationSetRef.html) — The configuration set to associate with the email identity.

  **Default:** do not use a specific configuration set

- `dkimIdentity`: [DkimIdentity](/cdk/api/v2/docs/aws-cdk-lib.aws_ses.DkimIdentity.html) — The type of DKIM identity to use.

  **Default:** Easy DKIM with a key length of 2048-bit

- `dkimSigning`: boolean = true — Whether the messages that are sent from the identity are signed using DKIM.

- `feedbackForwarding`: boolean = true — Whether to receive email notifications when bounce or complaint events occur.

  These notifications are sent to the address that you specified in the `Return-Path`
  header of the original email.

  You're required to have a method of tracking bounces and complaints. If you haven't set
  up another mechanism for receiving bounce or complaint notifications (for example, by
  setting up an event destination), you receive an email notification when these events
  occur (even if this setting is disabled).

- `identity`: [Identity](/cdk/api/v2/docs/aws-cdk-lib.aws_ses.Identity.html) (required) — The email address or domain to verify.

- `mailFromBehaviorOnMxFailure`: [MailFromBehaviorOnMxFailure](/cdk/api/v2/docs/aws-cdk-lib.aws_ses.MailFromBehaviorOnMxFailure.html) — The action to take if the required MX record for the MAIL FROM domain isn't found when you send an email.

  **Default:** MailFromBehaviorOnMxFailure.USE_DEFAULT_VALUE

- `mailFromDomain`: string — The custom MAIL FROM domain that you want the verified identity to use.

  **Default:** use amazonses.com

  The MAIL FROM domain
  must meet the following criteria:
    - It has to be a subdomain of the verified identity
    - It can't be used to receive email
    - It can't be used in a "From" address if the MAIL FROM domain is a destination for feedback
      forwarding emails