Resource-based authorization in IAM about aws-app-mesh-roadmap

[coultn]

We are hearing from customers that cross-account support is a must-have for GA.

[codenaked]

Does this mean that the App Mesh only works within a single account? ;-)

We separate out our microservices to different accounts and would love to have something that allows us to easily connect them together (without having to setup PrivateLink, custom routing, etc).

[dastbe]

so @codenaked there's a two phase approach here:

1. Make it easy to have a single "mesh" account that can distribute to multiple accounts w/ assumed roles. This is very similar to what the x-ray daemon is able to do, for example.
2. Make it easy to share/expose resources across meshes and accounts. This is where we'd really like to discuss more with everyone about how they'd best want to express this.

[kiranmeduri]

To expand on (1) above, it is similar to how DNS can be centralized, see https://aws.amazon.com/blogs/security/how-to-centralize-dns-management-in-a-multi-account-environment/.

[jamsajones]

Shipped with GA!