DMARC Verification for Microservices Email Delivery Pipelines
Your microservices architecture sends various emails from different systems. You need a way to ensure all these disparate email streams consistently align with DMARC for reliable delivery.
The problem
In a microservices architecture, different services often send emails (e.g., password resets, order confirmations, notification events) from the same primary domain but through various SMTP relays or email APIs like AWS SES or Mailgun. Tracking DMARC alignment across these disparate sending sources becomes incredibly complex. A misconfiguration in just one service's email setup can lead to widespread deliverability issues, impacting critical user interactions without clear visibility into the root cause.
Debugging DMARC failures in a distributed system means sifting through logs from multiple services and correlating them with raw DMARC XML reports, a highly time-consuming and error-prone process. Without a centralized, actionable view, engineers struggle to identify which specific microservice or email provider is causing SPF or DKIM alignment issues. This manual effort delays resolution of critical email delivery problems and diverts valuable development resources from core feature work.
How Aligned solves it
Concrete example
{
"domain": "app-services.com",
"sources": [
{"ip": "54.240.x.x", "org": "aws-ses", "spf_aligned": true, "dkim_aligned": true},
{"ip": "192.0.2.x", "org": "mailgun.com", "spf_aligned": false, "dkim_aligned": true}
],
"dmarc_status": "mixed",
"policy_effect": "quarantine"
}