How are you guys handling SES on multiple accounts? I got out of sandbox on the production account and now I'm trying to send an email from my dev account. I added a policy to SES to allow sending emails from another account (I got past the permission errors so now this should be fine), but for some reason, SES checks if the

to

email is verified, however I am out of sandbox (and tested sending from the console)... I'm trying with the CLI atm and getting this... I'm sending from a profile that is in the dev account, same regions everywhere

AWS_REGION=eu-west-1 aws ses send-email --to "my_email" --from "noreply@my-domain" --subject "test iam" --text "hey there" --source-arn "arn:aws:ses:eu-west-1:123456789012:identity/my-domain"

An error occurred (MessageRejected) when calling the SendEmail operation: Email address is not verified. The following identities failed the check in region EU-WEST-1: my_email

I actually applied on every account, not sure if this was the best option

same domain or with

<stage>.domain

on each account?

I usually do the e-mail based verification for dev environments as we set up SES to send only to the owner for all non-prod envs

<stage>.domain