Official vendor OpenAPI document · agent-readyCloud InfrastructureNetworkingapiKey38 EndpointsREST
For Agents
Use the AWS App Mesh API to manage service-to-service traffic for microservices on AWS, with 38 operations covering the full control-plane lifecycle.
Use for: Create a service mesh for my microservices, I want to add a virtual node for the orders service, Set up a weighted route that sends 10% of traffic to the new version, List all virtual services in a given mesh
Not supported: Does not handle service deployment, container orchestration, or load balancer provisioning - use for service mesh routing and traffic policy configuration only.
AWS App Mesh is a service mesh based on the Envoy proxy that standardises how microservices communicate. It provides routing, retries, circuit breaking, and end-to-end visibility for services running on ECS, EKS, EC2, and Fargate without requiring service code changes.
Install Jentic One Beta
Connect the AWS App Mesh to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the AWS App Mesh, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-appmesh" | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL "https://jentic.com/install.sh?src=apis&api=%2Fapis%2Famazonaws.com%2Faws-appmesh" | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with AWS App Mesh API.
Create a service mesh as the isolation boundary for related microservices
Define virtual nodes that point at concrete service backends with listeners and service discovery
Configure virtual services and routers to abstract clients from backend changes
Add weighted routes that split traffic between backends for canary or blue/green rollouts
Deploy virtual gateways to handle ingress traffic into the mesh
Apply circuit breaker, retry, and timeout policies on routes
Use Cases
Patterns agents use AWS App Mesh API for, with concrete tasks.
★ Canary release with weighted traffic split
Roll out a new version of a service safely by creating a virtual router with a route that splits traffic between the existing virtual node and a new virtual node pointing at the v2 deployment. App Mesh routes a small percentage of requests to v2 while leaving the rest on v1, and the weights can be shifted incrementally as confidence grows. End-to-end setup is typically under a day per service.
Create a route under the orders virtual router that sends 90% of traffic to the orders-v1 virtual node and 10% to the orders-v2 virtual node.
Microservice ingress through a virtual gateway
Expose a set of microservices to external clients through a single ingress point by creating a virtual gateway and gateway routes that map host headers or paths to internal virtual services. App Mesh handles TLS termination at the gateway and forwards requests through the mesh with consistent traffic policies. Configuration is typically completed in under a day.
Create a virtual gateway named 'public-gw' in the prod-mesh, then add a gateway route matching prefix '/orders' that forwards traffic to the orders virtual service.
Resilient service-to-service calls with retries
Improve resilience between microservices by attaching retry policies and timeouts to routes so transient failures retry automatically and slow backends do not exhaust client threads. App Mesh applies these policies through Envoy sidecars without requiring code changes in the calling services.
Update the orders virtual router's primary route to include a retry policy with three attempts and a per-try timeout of two seconds.
AI agent configuring service mesh routing through Jentic
A platform agent can manage service mesh updates on demand by calling App Mesh through Jentic. It searches for routing operations, loads the route schemas, and executes calls with scoped credentials so cluster-admin keys never enter its context. This turns multi-step canary updates into a single agent intent.
Search Jentic for 'configure traffic routing between microservices', load the UpdateRoute schema, and execute it to shift the orders virtual router weights to 50/50.
Key Endpoints
38 endpoints — aws app mesh is a service mesh based on the envoy proxy that standardises how microservices communicate.
METHOD
PATH
DESCRIPTION
PUT
/v20190125/meshes
Create a service mesh
PUT
/v20190125/meshes/{meshName}/virtualNodes
Create a virtual node
PUT
/v20190125/meshes/{meshName}/virtualServices
Create a virtual service
PUT
/v20190125/meshes/{meshName}/virtualRouters
Create a virtual router
PUT
/v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
Create a route under a virtual router
PUT
/v20190125/meshes/{meshName}/virtualGateways
Create a virtual gateway for ingress
PUT
/v20190125/meshes
Create a service mesh
PUT
/v20190125/meshes/{meshName}/virtualNodes
Create a virtual node
PUT
/v20190125/meshes/{meshName}/virtualServices
Create a virtual service
PUT
/v20190125/meshes/{meshName}/virtualRouters
Create a virtual router
PUT
/v20190125/meshes/{meshName}/virtualRouter/{virtualRouterName}/routes
Create a route under a virtual router
PUT
/v20190125/meshes/{meshName}/virtualGateways
Create a virtual gateway for ingress
Jentic AI Readiness Score
This API is usable in Jentic One now. Its AI-readiness score against Jentic's framework shows where it stands today and where improvements would make it even easier for agents to use.
A
AWS App Mesh
- AI-Aware (B-)62/100
99
Foundational Compliance63
Developer Experience & Jentic Compatibility40
AI-Readiness & Agent Experience93
Agent Usability50
Security100
AI DiscoverabilityPowered by JenticScoring Framework 1.0.0 | Scoring Engine 0.4.0
Show dimension breakdown
99
Foundational Compliance
Base layer of spec validity and structural soundness.
Grade: A+Signals: 4
95%
Lint Results
Aggregated quality score from linter diagnostics, weighted by severity.
100%
Resolution Completeness
Percentage of `$ref` references that resolve successfully.
100%
Specification Validity
Checks whether the API description parses successfully and conforms to its declared specification (e.g., OpenAPI).
100%
Structural Integrity
Structural correctness score based on schema issues using logarithmic dampening.
63
Developer Experience & Jentic Compatibility
Clarity, completeness, and ingestion readiness for developers and tooling.
Grade: B-Signals: 4
0%
Example Density
How richly the API is illustrated with examples.
100%
Example Validity
Percentage of examples that conform to their schemas.
50%
Response Coverage
Percentage of operations with complete response definitions (success, client error, server error).
100%
Tooling Readiness
Health of API ingestion, bundling, and resolution within Jentic pipelines.
40
AI-Readiness & Agent Experience
Semantic breadth, depth, and agent comprehension for AI systems.
Grade: FSignals: 4
60%
Description Coverage
Coverage of descriptions across API elements.
0%
Error Standardization
Coverage of RFC 9457 Problem Details for error responses.
100%
OperationId Quality
Coverage, uniqueness, and casing consistency of operationIds for AI inference.
0%
Summary Coverage
Coverage of summaries across operations/tags/info.
93
Agent Usability
Functional utility, complexity comfort, and AI orchestration readiness.
Grade: A+Signals: 1
93%
Complexity Comfort
Agent comfort level based on API operational and structural complexity.
50
Security
Trust, risk posture, and security compliance.
Grade: C-Signals: 1
50%
Authentication Strength
Average quality of security schemes based on authentication method strength (weakest link for OAuth2).
100
AI Discoverability
Findability, semantic richness, and reasoning readiness.
Grade: A+Signals: 1
100%
Descriptive Richness
Clarity and depth of descriptions across API elements.
Score it yourself
Every API in the directory is allowlisted, so you can re-score it with no key required.
npx @jentic/api-scorecard-cli score <openapi-url>Why Jentic?
What agents get from Jentic-routed access to this vendor.
Setup
Wiring AWS App Mesh by hand means creating IAM credentials, choosing the right regional host from appmesh.{region}.amazonaws.com, signing every request with AWS SigV4, and building your own retry and pagination handling. Through Jentic you install once, import AWS App Mesh from the API Directory, store the AWS access key once, and your agent calls it.
Permission scoping
AWS App Mesh puts the mesh name in the URL path (/v20190125/meshes/{meshName}/virtualNodes, /v20190125/meshes/{meshName}/virtualServices), so a rule can pin your agent to one mesh: it can create virtual nodes, services, and routers within that mesh and nothing else. You choose the operations it may call, so destructive ones like deleting a mesh or a virtual router are not included unless you add them.
Credential isolation
Your AWS access key for AWS App Mesh is stored once, encrypted, by your own Jentic One instance and signed with SigV4 at execution time. It never enters the agent's prompt, logs, or context.
Intent-based discovery
Agents search Jentic by intent such as 'configure traffic routing between microservices' or 'create a virtual gateway for ingress', and Jentic returns the matching AWS App Mesh operation with its input schema so the agent calls the right endpoint without browsing the AWS service reference.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using AWS App Mesh API through Jentic.
What authentication does the AWS App Mesh API use?
The AWS App Mesh API uses AWS Signature Version 4 (HMAC) request signing with IAM-issued credentials, the same scheme as every AWS service API. Jentic's your Jentic One instance stores those AWS credentials encrypted in the vault, generates short-lived signed requests at execution time, and never passes raw access keys into the agent's context.
Can I create a service mesh for my microservices with the AWS App Mesh API?
Yes - the AWS App Mesh API exposes 38 operations including the actions needed for that scenario. Use the operations listed in the key endpoints section as the starting point, then chain calls as needed for your workflow.
What are the rate limits for the AWS App Mesh API?
AWS applies per-account, per-region request rate limits to the AWS App Mesh control plane. Specific limits are not encoded in the OpenAPI spec; consult the AWS service quotas console for the AWS App Mesh entry, and design retries with exponential backoff to absorb throttling responses.
How do I configure traffic routing between microservices through Jentic?
Run pip install jentic, then call client.search('configure traffic routing between microservices') to discover the AWS App Mesh operations that match. Load the schema for the chosen operation with client.load(...) and execute it with client.execute(...). Jentic handles AWS request signing automatically against the credentials stored in your Jentic One instance.
Is the AWS App Mesh API free to call?
AWS does not charge for control-plane API calls themselves on most AWS App Mesh operations, but the underlying resources you create or operate (fleets, queries, deployments, and so on) incur usage charges according to the AWS App Mesh pricing page. Refer to the AWS pricing page for the service to estimate cost.
Which operations should an agent call first when working with the AWS App Mesh API?
For most workflows, agents should start by listing existing resources to understand the current state, then call the create or update operation that matches the intent. The endpoints listed under Key Endpoints in the catalog give a ranked starting set.
Can I limit what my agent is allowed to do with the AWS App Mesh API?
Yes. Because Jentic One is self-hosted, you write the rules that decide which AWS App Mesh operations and credentials your agent may use. Since App Mesh carries the mesh name in the URL path (for example /v20190125/meshes/{meshName}/virtualNodes and /v20190125/meshes/{meshName}/virtualServices), you can pin the agent to a single mesh so it creates virtual nodes, services, and routers only within that mesh. You also choose the exact operations it may call, so destructive actions like deleting a mesh or a virtual router stay off limits unless you explicitly allow them.
GET STARTED