# AWS App Mesh vs Red Hat OpenShift Service Mesh

**Leader by Vioscale score:** AWS App Mesh

| Attribute | AWS App Mesh | Red Hat OpenShift Service Mesh |
|---|---|---|
| **Vioscale score** | 64.7 (63% (medium)) | 50.6 (26% (low)) |
| deployment.options | `{"cloud":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | AWS App Mesh is an application networking service that provides consistent visibility and network traffic controls for microservices. It uses sidecar proxies to manage service communication, observability, and security without requiring application code changes. | - |
| features.capabilities | `{"data_plane":"sidecar","cncf_maturity":"none","automatic_mtls":true,"traffic_splitting":true,"commercial_support":true,"built_in_observability":true}` | `{"proxy":"envoy","data_plane":"sidecar","multicluster":true,"automatic_mtls":true,"traffic_splitting":true,"commercial_support":true,"built_in_observability":true}` |
| integrations.count | - | 8 |
| integrations.list | - | `[{"name":"Istio"},{"name":"Envoy"},{"name":"Kiali"},{"name":"Red Hat Connectivity Link"},{"name":"Red Hat OpenShift Observability"},{"name":"cert-manager Operator for Red Hat OpenShift"},{"name":"Red Hat OpenShift Gitops"},{"name":"Red Hat OpenShift Virtualization"}]` |
| market.availability | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | - | `{"cli":true}` |
| pricing | `{"type":"usage","summary":"Pay-as-you-go usage-based pricing; specific pricing rates not disclosed on provided pages","currency":"USD","freeTier":true,"sourceUrl":"https://aws.amazon.com/pricing/?nc2=h_pr_pr","retrievedAt":"2026-08-13T16:50:07.963Z"}` | - |
| pricing.free_tier | yes | - |
| pricing.model | freemium | commercial |
| pricing.price_level | low | - |
| pricing.transparent | no | - |
| reliability.status_page | yes | yes |
| security.disclosure_policy | yes | yes |
| security.fedramp | yes | - |
| security.gdpr | yes | - |
| security.hipaa | yes | - |
| security.iso27001 | yes | - |
| security.pci | yes | - |
| security.soc2 | yes | - |

## Capabilities (Service Mesh)

| Capability | AWS App Mesh | Red Hat OpenShift Service Mesh |
|---|:--:|:--:|
| **Architecture** |  |  |
| Data plane | Sidecar | Sidecar |
| Proxy | - | Envoy |
| **Security** |  |  |
| Automatic mutual TLS | ✓ | ✓ |
| SPIFFE / SPIRE identity | - | - |
| **Traffic** |  |  |
| Traffic splitting / canary | ✓ | ✓ |
| Fault injection / resilience | - | - |
| **Scale** |  |  |
| Multi-cluster federation | - | ✓ |
| **Portability** |  |  |
| VM support (beyond Kubernetes) | - | - |
| **Observability** |  |  |
| Built-in observability | ✓ | ✓ |
| **Standards** |  |  |
| Gateway API / GAMMA support | - | - |
| **Extensibility** |  |  |
| WASM extensibility | - | - |
| **Compliance** |  |  |
| FIPS mode | - | - |
| **Ecosystem** |  |  |
| CNCF maturity | None | - |
| **Ops** |  |  |
| Commercial support / enterprise edition | ✓ | ✓ |

*Source: Vioscale. Generated 2026-09-01T17:23:01.147Z. "-" = undocumented, not absent.*