Za ku buƙaci asusun AWS da kuma damar shiga DNS ɗin yankin (domain) ku. SES ita ce mafi arha a wannan jeri da tazara mai faɗi, kuma ita ce wadda ke da matakai mafi yawa.
Takardun bayanin Amazon na asali: Tabbatar da yanki · Samun bayanan shiga na SMTP · Fita daga sandbox
⭐ Muna haɗawa da SES ta hanyar tsarin SMTP ɗinta ne, ba REST API ɗinta ba. Wannan ya sa ake tambayar ku sunan mai amfani da kalmar sirri na SMTP maimakon maɓallin shiga na AWS. Hanyoyin biyu duk suna isar da saƙo ɗaya daidai; hanyar SMTP tana kauce wa dukkan matsalolin sanya hannu kan buƙatun AWS waɗanda ke da wahalar gaske gano tushensu daga waje, kuma ita ce hanyar sadarwa da Amazon ke fitar da bayanan shiga dominta don kayan aiki kamar namu su iya amfani da ita.
1. Zaɓi yanki kuma ku tsaya a kansa
SES na aiki ne bisa yanki (regional). Duk abin da ke ƙasa — yankin ku da aka tabbatar, bayanan shigan ku, ƙididdigar aikawa — na yanki ɗaya ne na AWS kuma babu shi a wani yankin daban.
Zaɓi wanda ya fi kusa da abokan cinikin ku (eu-west-1 don Turai, us-east-1 don Arewacin Amurka) kuma ku lura da shi. Tabbatar da yankin ku a Ireland sannan kuma ku ƙirƙiri bayanan shiga a Frankfurt ita ce hanya mafi sauƙi ta ɓata lokaci a nan, kuma kuskuren da yake nunawa ba ya cewa komai game da yankuna.
2. Tabbatar da yankin ku
Amazon SES console → Identities → Create identity → Domain. Shigar da ƙaramin yanki (subdomain) kamar mail.yourdomain.com.
Kunna Easy DKIM kuma ku zaɓi RSA_2048_BIT. SES tana ba ku bayanan CNAME guda uku:
| Nau'i | Mai masauki (Host) |
|---|
CNAME | <token1>._domainkey.mail.yourdomain.com |
CNAME | <token2>._domainkey.mail.yourdomain.com |
CNAME | <token3>._domainkey.mail.yourdomain.com |
Ƙara duka ukun. Yawancin lokaci tabbatarwa na kammaluwa a cikin sa'a ɗaya.
⭐ Haka kuma kunna yankin MAIL FROM na musamman (bounce.mail.yourdomain.com) sannan ku ƙara bayanan MX da na SPF TXT da take buƙata. Idan babu wannan, mai aiko da saƙon ku zai zama amazonses.com, don haka SPF zai daidaita ne da Amazon maimakon ku, kuma za ku dogara ne kawai kan DKIM.
3. Fita daga sandbox — wannan shi ne matakin da mutane ke mantawa
⛔⛔ Sabuwar asusun SES yana cikin sandbox kuma zai iya aikawa ne kawai zuwa adiresoshin da kuka riga kuka tabbatar daban. Zai karɓi duk wani abu daban amma ba zai isar da ko ɗaya daga ciki ba.
Wannan shi ne ainihin kuskuren da matakin tabbatarwarmu aka yi shi don ya kamo: a cikin sandbox, SES tana karɓar saƙon ku tare da nuna amsar nasara ta yau da kullun sannan kuma ta watsar da shi. Idan kuka tabbatar da tsarinmu ta hanyar aika gwaji zuwa adireshi da ya faru kun riga kun tabbatar a AWS, zai yi aiki — sannan kuma kowane saƙo zuwa ga ainihin abokin ciniki zai ɓace ɓat.
Account dashboard → Request production access. Amazon tana tambayar abin da kuke aikawa da yadda kuke kula da saƙonnin da suka dawo (bounces); gajerun jimloli biyu na gaskiya game da sanarwar hada-hadar kasuwanci ga abokan cinikin ku yawanci ana amincewa da su a cikin sa'o'i 24.
⭐ Yi wannan kafin ku haɗa SES a nan. Babu abin da za a gyara daga baya, saboda babu abin da zai nuna matsala.
4. Ƙirƙiri bayanan shiga na SMTP
SES console → SMTP settings → Create SMTP credentials.
Wannan yana ƙirƙirar mai amfani da IAM mai izinin aikawa kawai kuma yana ba ku sunan mai amfani na SMTP da kalmar sirri ta SMTP.
⛔ Waɗannan ba maɓallin shiga na AWS da maɓallin sirri ba ne. An samo su ne daga sirrin IAM ta wata takamaiman ƙa'ida (algorithm) kuma ba a musanya su. Manna maɓallin sirri na shiga na AWS a nan zai gaza tabbatar da asali a kowane lokaci, kuma kuskuren zai ce kawai an ƙi karɓar bayanan shiga.
⚠️ Sau ɗaya kawai ake nuna kalmar sirri. Sauke fayil ɗin CSV kafin ku bar shafin.
5. Haɗa shi a cikin Zinn®
Buɗe Email sending a cikin dashboard ɗin ku:
- Provider — Amazon SES
- Send from this domain —
mail.yourdomain.com
- AWS region — yankin da ke mataki na 1, misali
eu-west-1
- SMTP username — daga mataki na 4
- Port — bar shi a 587
- SES SMTP password — daga mataki na 4
Muna gina muku sunan mai masauki (email-smtp.<region>.amazonaws.com), don haka babu sunan mai masauki da za a yi kuskuren rubutawa.
6. Aika gwajin sannan ku shigar da lambar sirri
Danna Send test message zuwa akwatin saƙo da ke kan wata yankin daban wadda ba ku tabbatar a AWS ba — adireshin Gmail na kanku ya fi dacewa, saboda shi ne zai tabbatar da cewa kun fita daga sandbox. Karanta lambar sirrin kuma ku shigar da ita.
Lokacin da bai yi aiki ba
"Email address is not verified" yayin aikawa zuwa ga ainihin abokin ciniki — har yanzu kuna cikin sandbox. Mataki na 3.
535 Authentication Credentials Invalid — kun yi amfani da maɓallin shiga na AWS maimakon bayanan shiga na SMTP (mataki na 4), ko kuma bayanan shigan na wani yankin ne daban da wanda kuka shigar.
"Maximum sending rate exceeded" — sabon asusun kasuwanci (production) yana farawa ne da saƙonni 14 a sakan ɗaya da kuma 50,000 a rana. Wannan sanarwa ce mai tarin yawa, amma idan kuna ƙaura da ɗimbin abokan ciniki, fara neman ƙarin adadi tukunna.
Ya yi aiki a lokacin gwaji amma ya tsaya a kasuwanci — duba dashboard ɗin SES na Reputation. Amazon tana dakatar da aikawa kai tsaye a duk lokacin da ƙimar saƙonnin da suka dawo ko ƙorafe-ƙorafe suka wuce iyakar da aka gindaya, kuma abu ne mai sauƙi ya wuce iyakar da tsohon jerin abokan ciniki.