Cognito sends verification and password reset emails. By default it uses a shared AWS email service limited to 50 emails/day. For production, you must configure SES with a verified sender address. You need to verify the email (or domain) in SES first.
Paste into this field
Cognito → ses_fromAddressOutput looks like
noreply@example.comNavigate to Amazon SES (Simple Email Service) in the same region as your Cognito User Pool.
In the left sidebar, click "Verified identities" → "Create identity". Select "Email address", enter the address you want to send from (e.g. noreply@example.com), click "Create identity".
AWS sends a verification email to that address. Open the email and click the verification link. The identity status changes to "Verified".
For production, verify the whole domain (example.com) so any @example.com address can send. Choose "Domain" in the identity type, add the required DNS records, then verify.
New SES accounts are in sandbox mode — you can only send to verified addresses. Submit a "Request production access" form in SES to lift this restriction for a real deployment.
Select your Cognito node → property panel → "SES Sender Email" → enter the verified email address (e.g. noreply@example.com).
Once you have the value, go back to CloudStack Canvas and paste it into the highlighted field.
CloudStack Canvas · Validation Guide