Amazon MQ Adds Certificate-Based Authentication With Mutual TLS for RabbitMQ

Amazon Web Services has added support for certificate-based authentication using mutual TLS (mTLS) for RabbitMQ brokers in Amazon MQ. The update allows clients and brokers to authenticate each other using X.509 certificates, reducing reliance on username-and-password credentials and strengthening security for message-based applications. The feature is designed to simplify secure connectivity for organizations running sensitive or regulated workloads that depend on RabbitMQ messaging.

Message brokers are increasingly used in distributed and event-driven architectures, making secure authentication critical. While mTLS has long been a best practice for securing service-to-service communication, implementing it often requires significant custom configuration. By providing native mTLS support within Amazon MQ, AWS reduces operational complexity while aligning with zero-trust principles. For developers and platform teams, the feature offers a more standardized way to secure RabbitMQ traffic, particularly in environments that require strong identity verification and encrypted communication by default. The plugin is generally available across regions where Amazon MQ RabbitMQ 4 is available.

The "AWS Release Radar" blog is researched, fact-checked, edited and updated by the editors of AWSInsider.net, with writing assistance from AI. To submit your channel company's press release for consideration, contact Ammaarah Mohamed.

Posted by AWS Editors on 01/12/2026