AWS App Mesh now supports mutual TLS authentication

[ewbankkit]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

AWS App Mesh now supports mutual TLS (Transport Layer Security) authentication that offers two-way peer authentication.

New or Affected Resource(s)

• aws_appmesh_virtual_gateway - r/aws_appmesh_virtual_gateway: Support mutual TLS authentication #18106
• aws_appmesh_virtual_node - r/aws_appmesh_virtual_node: Support mutual TLS authentication #18127

Potential Terraform Configuration

resource "aws_appmesh_virtual_node" "example" {
  name      = "example"
  mesh_name = aws_appmesh_mesh.example.id

  spec {
    backend_defaults {
      client_policy {
        tls {
          ports = [8443]

          validation {
            subject_alternative_names {
              match {
                exact = ["colorteller.appmesh-mtls.local"]
              }
            }
          }
        }
      }
    }
  }
}

References

Announcement.
User Guide

Requires AWS SDK v1.37.2:

• build(deps): bump github.com/aws/aws-sdk-go from 1.37.0 to 1.37.4 #17469

[ewbankkit]

Support for AWS App Mesh mutual TLS authentication will be released in Terraform AWS Provider v3.35.0.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!