AWS App Mesh provides visibility and network traffic controls for communication between services. It uses the open source Envoy proxy to manage traffic entering and leaving service containers. Routes can be updated between services without changes to application code, while proxies balance client traffic and adjust endpoints using health checks and service registration. The managed service provides metrics and logs for service hops and can collect traces to help visualize service API calls. Listed integrations include Amazon CloudWatch and AWS X-Ray, along with Datadog, HashiCorp, and Sysdig. App Mesh works with AWS Fargate, Amazon ECS, Amazon EKS, Amazon EC2, and Kubernetes on EC2. It supports mutual TLS for service identity checks, using certificates from AWS Certificate Manager Private Certificate Authority or a customer-managed certificate authority. There is no additional charge for App Mesh itself, but proxy-related AWS resources are billed separately. AWS says API clients must support TLS 1.2 and recommends TLS 1.3. Most importantly for anyone evaluating it, AWS states support ends on September 30, 2026; after that, the console and App Mesh resources will no longer be accessible.
Who it is for
App Mesh is for teams managing communication between services in the listed AWS and Kubernetes environments. Its stated end of support makes the September 30, 2026 date essential to adoption planning.
What is good
- Routes can change without application code changes.
- Provides metrics, logs, and trace collection.
- Supports mutual TLS for service identity verification.
- Works with ECS, EKS, EC2, and Fargate.
What to know first
- Support ends on September 30, 2026.
- Proxy-consumed AWS resources are billed separately.
- API clients must support TLS 1.2.
Verdict
App Mesh offers managed traffic controls and visibility for service-to-service communication. AWS says its console and resources will no longer be accessible after support ends on September 30, 2026, a major adoption constraint.
AWS App Mesh plans and pricing
All plansCompared on service mesh platforms
- Deployment model
- managed
- Proxy architecture
- sidecar
- mTLS support
- Yes
- Traffic policies
- Yes
- Supported platforms
- Amazon ECS, Amazon EKS, Kubernetes on Amazon EC2, Amazon EC2
