Add the DKIM records (CNAME ×3)
For each, Add record → Type CNAME, Name = the
*._domainkey… value, Target =
…dkim.amazonses.com. Set Proxy status to DNS only (grey cloud) — mail records must not be
proxied.Add SPF + DMARC (TXT)
Type TXT, Name and Content exactly as shown (e.g.
v=spf1 include:amazonses.com ~all and
the _dmarc record). Cloudflare adds the quotes for you — don’t paste extra quotes.POST /domains/{id}/verify to re-check now.