Keep your provider and your config. Just swap the recipient to validate real TLS, DNS, and SPF/DKIM entirely inside your VPC. Works with Postmark, SendGrid, SES, and more.