App Mesh to VPC Lattice Migration

Sidecar mesh replaced by managed data plane with SigV4 identity

App Mesh to VPC Lattice Migration Sidecar mesh replaced by managed data plane with SigV4 identity AS-IS: App Mesh (EOL 2026-09-30) TO-BE: VPC Lattice frontend · demo ns, sigv4-proxy in TO-BE · Architecture component frontend demo ns, sigv4-proxy in TO-BE App Mesh + Envoy · sidecar, mTLS · AS-IS: App Mesh (EOL 2026-09-30) App Mesh + Envoy sidecar, mTLS Cloud Map · appmesh-test.local, TTL 300s · AS-IS: App Mesh (EOL 2026-09-30) Cloud Map appmesh-test.local, TTL 300s Lattice Service Network · HTTPS listener, no ACM needed · TO-BE: VPC Lattice Lattice Service Network HTTPS listener, no ACM needed IAM Auth Policy · identity = Pod IAM role · TO-BE: VPC Lattice IAM Auth Policy identity = Pod IAM role backend (nginx) · no sidecar in TO-BE · Architecture component backend (nginx) no sidecar in TO-BE cache (redis) · plain TCP - stays ClusterIP · Architecture component cache (redis) plain TCP - stays ClusterIP AS-IS 3.4-6.4 ms DNS discovery HTTP:80 TO-BE SigV4 signed allow frontend role 4.1-10.2 ms TCP:6379 in-cluster Legend Backend Database Cloud External

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • T theme • E export