Amazon Route 53
Step by step: add the Notix DKIM, SPF, MX and DMARC records to a Route 53 hosted zone, quoted TXT values included.
Use this guide if your domain's DNS is a hosted zone in Amazon Route 53. Its nameservers look like ns-123.awsdns-45.com. Route 53 is different from most hosts in two ways: TXT values go in double quotation marks, and the MX priority goes inside the value.
Open your domain in Domains first and keep the page open. You copy every name and value from its DNS records table.
The records to add
| Type | Record name | Value | Priority |
|---|---|---|---|
| TXT | notix._domainkey | "p=..." (copy the whole key) | none |
| TXT | mail | "v=spf1 include:_spf.usenotix.dev ~all" | none |
| MX | mail | 10 feedback-smtp.<region>.amazonses.com | inside the value |
| TXT | _dmarc | "v=DMARC1; p=none;" | none |
These names are for a domain added as acme.com. Notix shows each name in the short form, without your main domain on the end, so copy it from your domain page as it is. If you added a subdomain such as news.acme.com, the names read mail.news and notix._domainkey.news; _dmarc stays the same. The DKIM name and key are different for every domain. The MX value names the region your domain sends from, for example feedback-smtp.eu-west-1.amazonses.com, so copy it from your domain page too.
Notix shows the values without quotes. In Route 53, put double quotation marks around each TXT value, and put 10 and a space in front of the MX value.
Add them at Amazon Route 53
Open the hosted zone
Open the Route 53 console at console.aws.amazon.com/route53. In the navigation pane, choose Hosted zones, then choose your domain's hosted zone.
Add each TXT record
Choose Create record. If Route 53 asks for a routing policy, choose Simple routing.
- In Record name, enter the name from the table, for example
_dmarc. - Set Record type to TXT.
- In Value, paste the value inside double quotes, for example
"v=DMARC1; p=none;". - Choose Create records.
Repeat for the DKIM, SPF and DMARC records.
- In Record name, enter the name from the table, for example
Add the MX record
Choose Create record again.
- In Record name, enter
mail. - Set Record type to MX.
- In Value, enter the priority, a space, then the MX value, for example
10 feedback-smtp.eu-west-1.amazonses.com. - Choose Create records.
- In Record name, enter
Things to know at Amazon Route 53
- Route 53 adds the hosted zone's name for you. Enter
mail, notmail.acme.com. For the main domain you would leave Record name blank; Route 53 does not use@. - Every TXT value goes in double quotation marks. A value without them can be saved wrong.
- A single quoted string can hold at most 255 characters. If Route 53 rejects the DKIM key as too long, split it into pieces of 255 characters or fewer, quote each piece, and put them on one line with a space between:
"first part" "second part". Mailbox providers join the pieces back together. - If
mailalready has a TXT record, Route 53 keeps all of a name's TXT values in one record, one value per line. Add the SPF value as a new line in that record rather than making a second record. - The dot at the end of the MX value is optional in Route 53.
SPF and DMARC: check before you add
- SPF. A name can have only one SPF record. Notix puts its SPF on
mail, not on your main domain, so it never clashes with the SPF your main domain may already have for your mailbox provider. Leave that one as it is. Ifmailitself already has a TXT record that starts withv=spf1, do not add a second one: edit it to includeinclude:_spf.usenotix.dev. - DMARC. A domain can have only one DMARC record. If
_dmarcalready has a record that starts withv=DMARC1, keep it and skip the Notix one. Notix accepts the record you have. Two DMARC records cancel each other out, and mailbox providers then ignore both. - MX on `mail`. The MX record only takes bounce and complaint reports back to Notix. It does not touch the MX records on your main domain, so your normal inbox keeps working.
After you save
AWS says changes reach every Route 53 nameserver within 60 seconds. Resolvers that cached the old answer keep it until its TTL runs out; AWS suggests a TTL of 300 seconds while you set things up. Most records show in Notix within about 10 minutes.
You do not need to watch the page. Notix checks your records again on its own, and the domain turns Verified when the required records are found. To check straight away, open the domain in Domains and press Verify again. If a record is found at the wrong name, for example mail.acme.com.acme.com, the domain page says what to fix.
The records you add stay at your DNS host. Do not delete them later: Notix keeps checking them while you send.
Sources
We wrote this guide from the host's own help pages, checked on 21 October 2026. Labels can change; if your screen looks different, the host's page is the one to follow.
- AWS: Creating records by using the Amazon Route 53 console
- AWS: Values that you specify when you create or edit records
- AWS: Supported DNS record types (MX and TXT)
For hosts not listed here, see Any other DNS host.