I successfully created an SPF record in Route 53, but other mail providers aren't able to identify the record. How can I fix this?

2 minute read

I successfully created an SPF record in Amazon Route 53. However, my mail providers can't identify the record, or SPF validation isn't working. How can I fix this?

Short description

With most mail providers, the SPF configuration isn't applied because SPF records were deprecated in April 2014. For more information, see RFC 7208 on the Internet Engineering Task Force (IETF) website. Instead of an SPF record, it's a best practice to create a TXT record that contains the applicable values.


Create a TXT record with the same content as the SPF record:

  1. Open the Route 53 console.
  2. Choose Hosted zones.
  3. Select the domain of the SPF record.
  4. Copy the value of the SPF record, and then choose Create record.
  5. For Routing policy, choose Simple routing.
  6. Choose Next.
  7. Choose Define simple record.
  8. For Record name, specify a name.
  9. For Value/Route traffic to, choose IP address or another value depending on the record type. Then, paste the SPF record value that you copied in step 4.
  10. For Record type, choose TXT.
  11. For TTL (seconds), specify a time to live value.
  12. Choose Define simple record.

Related information

Supported DNS record types

How can I configure SPF or TXT records that are longer than 255 characters in Route 53?

AWS OFFICIALUpdated a year ago