I'd like to switch mails to Amazon SES and register a domain with
Google Apps, to enable SPF and possibly DKIM on mails. I've read the
docs at Amazon and this seems to require fairly raw DNS records
editing. Does Google Apps allow this, or would I have to register the
domain with a registrar separately (not through Google Apps)?
http://docs.amazonwebservices.com/ses/latest/DeveloperGuide/SPFSenderIDDKIM.html