This post explains how to deploy three email security mechanisms on AWS: BIMI, MTA-STS, and SMTP TLS reporting, to prevent your domain from being used in phishing attacks and improve your organization's email security.

• Brand Indicators for Message Identification (BIMI)allows you to display a logo with your email domain.
• Mail Transfer Agent Strict Transport Security (MTA-STS) ensures that email servers use TLS encryption.
• SMTP TLS reportingenables you to monitor your domain's TLS security posture.

This solution requires specific DNS records and files to be hosted in Amazon S3 and delivered through CloudFront with a valid TLS certificate from ACM.