Per the CDK Design Guidelines App Mesh should have grants on a per resource basis.

Use Case

Granting permissions to other services to call App Mesh is an important part of stabilizing the App Mesh L2 APIs

Proposed Solution

For each resource, we should implement a grant for Describe, Delete, Update, TagResource, and UntagResource. There should also be high level ListAll and DescribeAll permissions as described in the CDK Design Guidelines.

For Virtual Nodes and Virtual Gateways, we should implement a grant for StreamAggregatedResources

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

This is a 🚀 Feature Request