AWS App Mesh

APIyesOSS—FREEyesDOCS4/5
AA7.2#2 of 19
outWeboutWindowsoutMacoutLinux—Android—iOS

Ranked in Service Mesh Platforms ·Free plan

About

AWS App Mesh provides visibility and network traffic controls for service-to-service communication. It uses the open-source Envoy proxy to manage traffic entering and leaving service containers. Routes between services can change without application code changes, while proxies balance client traffic and adjust endpoints based on health checks and service registration. The managed service provides metrics and logs for service hops and can collect traces to help visualize service API calls. It works with AWS Fargate, Amazon ECS, Amazon EKS, Amazon EC2 and Kubernetes on EC2. App Mesh supports mutual TLS for service identity verification, using certificates from AWS Certificate Manager Private Certificate Authority or a customer-managed certificate authority. Listed integrations include CloudWatch and AWS X-Ray, plus tools such as Datadog, HashiCorp and Sysdig. There is no additional charge for App Mesh itself, but AWS resources consumed by the proxies are billed separately. AWS states that API clients must support TLS 1.2 and recommends TLS 1.3. AWS also states that support ends on September 30, 2026; after that, the console and App Mesh resources will no longer be accessible.

Who it is for

App Mesh may suit teams running service workloads in the listed AWS environments that need traffic controls, service visibility or mutual TLS. Its announced end of support makes the September 30, 2026 cutoff an important constraint.

What is good

  • Routes can change without application code changes.
  • Supports mutual TLS for service identity checks.
  • Provides service-hop metrics and logs.
  • Works with ECS, EKS, EC2 and Fargate.

What to know first

  • Support ends on September 30, 2026.
  • Proxy resource costs are billed separately.
  • Resources and console become inaccessible after support ends.

Verdict

App Mesh offers Envoy-based traffic management, monitoring and mutual TLS across several AWS environments. Its announced end of support and resource inaccessibility after September 30, 2026 are central adoption constraints.

Compared on service mesh platforms

Deployment model
managedaws.amazon.com
Proxy architecture
sidecaraws.amazon.com
mTLS support
Yesaws.amazon.com
Traffic policies
Yesaws.amazon.com
Supported platforms
Amazon ECS, Amazon EKS, Kubernetes on Amazon EC2, Amazon EC2aws.amazon.com

Facts

Purpose
AWS App Mesh provides visibility and network traffic controls for service-to-service communication.aws.amazon.com · 4 Oct 2026
Proxy
App Mesh uses the open source Envoy proxy to manage traffic into and out of service containers.aws.amazon.com · 4 Oct 2026
Traffic routing
App Mesh can dynamically update traffic routing between services without changes to application code.aws.amazon.com · 4 Oct 2026
Load balancing
Its proxies load balance client traffic and adjust endpoints based on health checks and service registration.aws.amazon.com · 4 Oct 2026
Integrations
The feature page lists Amazon CloudWatch and AWS X-Ray, along with partner and open source tools including Datadog, HashiCorp, and Sysdig.aws.amazon.com · 4 Oct 2026
Supported environments
The feature page says App Mesh works with AWS Fargate, Amazon ECS, Amazon EKS, Amazon EC2, and Kubernetes on EC2.aws.amazon.com · 4 Oct 2026
Authentication
App Mesh supports mutual TLS for service-to-service identity verification and describes using certificates from AWS Certificate Manager Private Certificate Authority or a customer-managed certificate authority.aws.amazon.com · 4 Oct 2026
Managed service
AWS describes App Mesh as a managed, highly available service that avoids the need to install or manage application-level communications infrastructure.aws.amazon.com · 4 Oct 2026
Monitoring
App Mesh provides metrics and logs for service hops and can collect traces to help visualize service API calls.aws.amazon.com · 4 Oct 2026
Third-party monitoring
The FAQs list Splunk, Prometheus, Jaeger, Flagger, Grafana, Zipkin, and LightStep as examples of Envoy-compatible monitoring tools.aws.amazon.com · 4 Oct 2026
Security
AWS App Mesh API clients must support TLS 1.2, and AWS recommends TLS 1.3.docs.aws.amazon.com · 4 Oct 2026
End of support
AWS states that App Mesh support ends on September 30, 2026, after which the console and App Mesh resources will no longer be accessible.docs.aws.amazon.com · 4 Oct 2026

Best AWS App Mesh alternatives

See all 18