Category · 19 comparisons

Security & Identity: AWS vs Azure vs Google Cloud

Every security & identity capability, with its name on each cloud. Click a row for the full comparison and differences.

CapabilityAWSAzureGoogle CloudMatch
Identity & access management
  • AWS IAM
  • Azure RBAC
  • Microsoft Entra ID
  • Cloud IAM
Close
Workforce SSO & directory
  • AWS IAM Identity Center
  • Microsoft Entra ID
  • Cloud Identity
Close
Customer identity (CIAM)
  • Amazon Cognito
  • Microsoft Entra External ID
  • Identity Platform
  • Firebase Authentication
Exact
Managed Active Directory
  • AWS Directory Service (Managed Microsoft AD)
  • Microsoft Entra Domain Services
  • Managed Service for Microsoft Active Directory
Exact
Key management
  • AWS Key Management Service (KMS)
  • Azure Key Vault
  • Cloud Key Management Service (KMS)
Exact
Hardware security modules
  • AWS CloudHSM
  • Azure Managed HSM
  • Azure Cloud HSM
  • Cloud HSM
Exact
Secrets management
  • AWS Secrets Manager
  • Azure Key Vault
  • Secret Manager
Exact
TLS certificates
  • AWS Certificate Manager (ACM)
  • Key Vault certificates
  • App Service certificates
  • Certificate Manager
Close
Private certificate authority
  • AWS Private CA
No direct equivalent
  • Certificate Authority Service
Partial
Cloud security posture management
  • AWS Security Hub
  • Microsoft Defender for Cloud
  • Security Command Center
Close
Threat detection
  • Amazon GuardDuty
  • Microsoft Defender for Cloud
  • Security Command Center (Event Threat Detection)
Close
SIEM / security analytics
  • Amazon Security Lake
  • Microsoft Sentinel
  • Google Security Operations
Partial
Vulnerability scanning
  • Amazon Inspector
  • Defender for Cloud vulnerability assessment
  • Artifact Analysis
  • Security Command Center
Close
Sensitive data discovery (DLP)
  • Amazon Macie
  • Microsoft Purview
  • Sensitive Data Protection
Close
Compliance reports
  • AWS Artifact
  • Service Trust Portal
  • Compliance Reports Manager
Exact
API activity audit logs
  • AWS CloudTrail
  • Azure Monitor activity log
  • Cloud Audit Logs
Exact
Configuration compliance rules
  • AWS Config
  • Azure Policy
  • Organization Policy Service
  • Cloud Asset Inventory
Close
Confidential computing
  • AWS Nitro Enclaves
  • Azure Confidential Computing
  • Confidential VMs
Close
Zero-trust application access
  • AWS Verified Access
  • Microsoft Entra Private Access
  • Identity-Aware Proxy
  • Chrome Enterprise Premium
Close