You must specify the starttls protocol in delivery server configuration.
However, since there is an implementation for the web api from amazon, you should use that instead of amazon smtp when creating a delivery server because that handles bounces/complaints/etc automatically, you don't need a bounce server anymore for that.
If you are going to use Amazon Web API implementation, then you need to generate a SES user as show here:
