AWS Security ChangesHomeSearch

AWS app-mesh: Update App Mesh Envoy image versions to v1.39.1.0 across regions

Service: app-mesh · 2026-09-27 · Documentation medium

File: app-mesh/latest/userguide/envoy.md

Summary

All documented standard and FIPS Envoy container image tags (commercial, me-south-1, ap-east-1, ap-southeast-3, eu-south-1, il-central-1, af-south-1, and public.ecr.aws) are updated from v1.34.13.3 to v1.39.1.0.

Security assessment

The change replaces image version strings used to deploy the Envoy sidecar, keeping the data plane on a newer release; no CVE or vulnerability is cited in the diff, so it is generic version/hardening guidance with security-relevant deployment impact.

Evidence

-    840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod-fips

Diff

diff --git a/app-mesh/latest/userguide/envoy.md b/app-mesh/latest/userguide/envoy.md
index d839673c2..bad5a67d5 100644
--- a//app-mesh/latest/userguide/envoy.md
+++ b//app-mesh/latest/userguide/envoy.md
@@ -52 +52 @@ Standard
-    840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -57 +57 @@ FIPS-compliant
-    840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod-fips
+    840364872350.dkr.ecr.region-code.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod-fips
@@ -65 +65 @@ Standard
-    772975370895.dkr.ecr.me-south-1.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    772975370895.dkr.ecr.me-south-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -73 +73 @@ Standard
-    856666278305.dkr.ecr.ap-east-1.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    856666278305.dkr.ecr.ap-east-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -81 +81 @@ Standard
-    909464085924.dkr.ecr.ap-southeast-3.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    909464085924.dkr.ecr.ap-southeast-3.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -89 +89 @@ Standard
-    422531588944.dkr.ecr.eu-south-1.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    422531588944.dkr.ecr.eu-south-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -97 +97 @@ Standard
-    564877687649.dkr.ecr.il-central-1.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    564877687649.dkr.ecr.il-central-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -105 +105 @@ Standard
-    924023996002.dkr.ecr.af-south-1.amazonaws.com/aws-appmesh-envoy:v1.34.13.3-prod
+    924023996002.dkr.ecr.af-south-1.amazonaws.com/aws-appmesh-envoy:v1.39.1.0-prod
@@ -113 +113 @@ Standard
-    public.ecr.aws/appmesh/aws-appmesh-envoy:v1.34.13.3-prod
+    public.ecr.aws/appmesh/aws-appmesh-envoy:v1.39.1.0-prod
@@ -118 +118 @@ FIPS-compliant
-    public.ecr.aws/appmesh/aws-appmesh-envoy:v1.34.13.3-prod-fips
+    public.ecr.aws/appmesh/aws-appmesh-envoy:v1.39.1.0-prod-fips