no, I'm lost. I've got this so far:

export function createIdentity(
    configurationSet: aws.sesv2.ConfigurationSet
) {
    const identity = new aws.sesv2.EmailIdentity("sesEmailIdentity", { 
        emailIdentity: "my-site.dev",
        configurationSetName: configurationSet.configurationSetName,
        dkimSigningAttributes: {
            signingAttributesOrigin: "AWS_SES"
        }
    });

    identity.dkimSigningAttributes.tokens.apply((tokens) => {
        for (const token of tokens) {
            const record = new aws.route53.Record("sesDKIMRecord", {
                name: "",
                type: "CNAME",
                records: [],
            })
        }
    });
    
    
}

I know that the record is meant to have a name that is

blah-blah-blah._<http://domainkey.my-site.dev|domainkey.my-site.dev>

and then the record is meant to be

<http://blah-blah-blah.dkim.amazonses.com|blah-blah-blah.dkim.amazonses.com>

but I'm not sure where I get both pieces of information. I'm presuming the token is one of them but where is the other?

ignore me forgot that the token was reused in both the name and the record