AWS App Mesh support for TLS in transit encryption

[brunocous]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Encryption in transit is an important feature for service meshes. App Mesh support's for it is still for preview channel only (see ref 1). The virtual node Terraform resource does not provide the option at the moment.

New or Affected Resource(s)

• aws_appmesh_virtual_node

Proposed interface

According to the documentation, a certificate should be created somewhere (ACM), and a tls object should be added to the listener of each virtual node. This tls object has two options: a mode and reference to a ACM certificate.

"tls": {
            "mode": "STRICT",
            "certificate": {
                "acm": {
                    "certificateArn": "${CERTIFICATE_ARN}"
                }
            }
        }

References

• https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual-node-tls.html

[ewbankkit]

@brunocous I had been looking at the App Mesh preview channel in #9468 but put this on pause as the features started to move into the release channel.
I'm not sure what plans are for supporting preview channels in general.
See also #11850,

[SeanFaheyYgrene]

@ewbankkit as a heads up this feature is now out of preview.

[SebastianC]

any idea when this may be reviewed/merged?

[lays147]

Is there any timeline when this will be available on the provider?

[ghost]

This has been released in version 3.9.0 of the Terraform AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template for triage. Thanks!

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!