Amazon provides publicly available documentation on complying with DMARC using AmazonSES:
https://docs.aws.amazon.com/ses/latest/dg/send-email-authentication-dmarc.html

The best way to configure AmazonSES to meet DMARC requirements is to set up DKIM signing through Easy DKIM.

For additional help, see AWS SES Easy DKIM set up.

Authenticate your domain for your email campaigns using DKIM:
https://help.campaignmonitor.com/s/article/manage-your-own-authentication

Note: Campaign Monitor documentation recommends adding include:_spf.createsend.com to your domain’s SPF record. This is an unnecessary step.

Set up custom domain authentication using DKIM signing and/or configuring a custom return-path:
https://support.clickdimensions.com/hc/en-us/articles/115001163534-DKIM-Signing

The ClickDimensions email authentication setup can be particularly challenging to follow if you aren’t familiar with DMARC concepts. If you need assistance you can request an Email Authenticity Consultation

Set up custom domain authentication using DKIM signing:
https://knowledgebase.constantcontact.com/email-digital-marketing/articles/KnowledgeBase/5932-self-publishing-for-authentication?lang=en_US

Set up custom domain authentication using DKIM:
https://support.e2ma.net/s/article/DomainKeys-Identified-Mail-DKIM

Set up DKIM-signing for your email campaigns:
https://help.icontact.com/customers/s/article/Custom-DKIM-Setup-Improve-Email-Delivery-and-Inbox-Placement

We don't recommend using a custom domain that is a general use domain and has email aliases assigned to a large user base. Once a domain is approved for use with Mailchimp, anyone with an address in that domain can send marketing campaigns and newsletters from Mailchimp.

Set up custom domain authentication:
https://mailchimp.com/help/set-up-email-domain-authentication/

DoIT Enterprise CRM (Customer Relationship Management) Team provides support for the campus implementaton of Salesforce. They also maintain documentation on how to send DMARC compliant email from Salesforce: Salesforce Email DKIM/DMARC Info.

Set up custom domain authentication:
https://sendgrid.com/docs/ui/account-and-settings/how-to-set-up-domain-authentication/

Important Note: A CNAME record is an alias for another domain. You should never create a CNAME record for an existing UW-Madison email domain (e.g. doit.wisc.edu).