In order to pass SPF validation with Amazon SES you can either leave the default MAIL FROM address that Amazon uses or setup a custom MAIL FROM domain so that it can align with the FROM address in case you plan to use DMARC.

In the first case you do not have to do anything as Amazon already uses their default MAIL FROM address and SPF passes. 

If, however, you would like to use your own MAIL FROM domain and have DMARC validate against SPF please click on the button below for the steps needed to create a custom domain.

To let Amazon sign your emails you can use Easy DKIM and the instructions on how to set it up can be found using the button below.

Create a free OnDMARC account to test your configuration.