The Lambda doesn't send or receive email directly, it uses SES.
SES handles this in a delegated way via DKIM signatures (Domain Keys Identified Mail).
SES handles this in a delegated way via DKIM signatures (Domain Keys Identified Mail).
Just another example of one set of rules for human people and another for corporate people. Either pledge yourself to a corporate feudal lord (amazon here) or suffer.