For your provider

The record that provider tells you to publish.

• Google WorkspaceGoogle's SPF example for mail that Google sends is v=spf1 include:_spf.google.com ~all. Any other sender has to be added to that same record.
• Microsoft 365Microsoft's SPF example for a custom domain in Microsoft 365 is v=spf1 include:spf.protection.outlook.com -all. DKIM public keys are CNAME records. The CNAME values printed in the article are examples. The ones you publish are the ones the Defender portal shows for the domain.
• Amazon SESAmazon SES uses a subdomain of amazonses.com as the default MAIL FROM. A custom MAIL FROM needs the SPF v=spf1 include:amazonses.com ~all and exactly one MX record.