Not a lot of options here. Amazon SES is a mail notification service more than a pure SMTP server. Because of this, all of your from emails/domains must be previously verified and all of your mail sessions must be properly authenticated.
The only alternative i can figure out is to configure postfix as a proxy instead of a relay, so it replaces the from header with a well known address, verified by SES, and properly authenticates in SES.