Apparently it worked, even if the values were not exactly the same due to the extra trailing dot. I originally thought it didn't work because AWS SES verified 4 or 5 times without noticing the domain was verified, and even though the records were well published.

Whatever, it has worked !