Both Hubspot and AWS SES require that we add CNAME records to make emails sent through them work.
See for e.g. https://knowledge.hubspot.com/articles/kcs_article/cos-general/how-can-i-resolve-the-missing-records-associated-with-my-email-sending-domain?utm_source=hs_email&utm_medium=email&utm_content=63942509
However, technically, the specs for DNS specify that you can't add a CNAME record to the domain apex.
So, how does this work? Let's say Hubspot want me to add a CNAME with the Hostname:
Should I create a subdomain
hs2._domainkey? Or add the CNAME record in the domain apex in Amazon Route 53 and risk causing problems with subdomains?