Troubleshoot Amazon SES in EonMailer

Credential and connection errors

Message	Fix
InvalidClientTokenId	Key deleted or wrong ID — create new IAM key
SignatureDoesNotMatch	Re-copy secret; no trailing spaces
AccessDenied	IAM policy missing ses:SendEmail
Connection timeout	Corporate firewall blocking AWS API — allow HTTPS egress

Revisit IAM credentials.

Sandbox and verification

Message	Fix
Email address not verified	Leave sandbox or verify recipient in SES
Identity not found	Domain verified in different region than EonMailer settings
Daily quota exceeded	Sandbox 200/day limit — request production

Send-time rejects

• 554 Message rejected — Content policy or missing From on verified domain.
• Account sending paused — High bounce/complaint rate; open AWS SES dashboard for notice.

DKIM / SPF failures in headers

1. Compare EonMailer DNS panel to live dig results.
2. Disable CDN proxy on DKIM CNAMEs.
3. Confirm MAIL FROM subdomain if configured.

See DNS troubleshooting.

Webhooks missing

1. Confirm SNS → HTTPS subscription confirmed (AWS sends confirmation request).
2. Endpoint must return 200 within timeout.
3. Re-save event destination in SES after rotating EonMailer URL.

Still stuck?

Collect Message ID from EonMailer activity log + region + timestamp for AWS Support.