Both Hubspot and AWS SES require that we add CNAME records to make emails sent through them work.
To this end, I've been asked to add various CNAMES to our domain apex e.g.
example.com, so we can send emails from e.g.
email@example.com (as opposed to a subdomain e.g.
See for e.g. https://knowledge.hubspot.com/articles/kcs_article/cos-general/how-can-i-resolve-the-missing-records-associated-with-my-email-sending-domain?utm_source=hs_email&utm_medium=email&utm_content=63942509
However, technically, the specs for DNS specify that you can't add a CNAME record to the domain apex.
So, how does this work? Let's say Hubspot want me to add a CNAME with the Hostname:
Should I create a subdomain
hs2._domainkey? Or add the CNAME record in the domain apex in Amazon Route 53 and risk causing problems with subdomains?