Security & Identity · Configuration compliance rules

AWS Config vs Azure Policy vs Organization Policy Service

Configuration compliance rules, side by side on AWS, Azure and Google Cloud. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.

Security & Identity

Configuration compliance rules

Close match

AWS

AWS Config

Azure

Azure Policy

Google Cloud

Organization Policy Service
Cloud Asset Inventory

What's different

Azure Policy can deny or auto-remediate at deploy time. AWS Config primarily evaluates after the fact.

Quick answers

What is the Azure equivalent of AWS Config?
The Azure equivalent of AWS Config is Azure Policy. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.
What is the Google Cloud equivalent of AWS Config?
The Google Cloud equivalent of AWS Config is Organization Policy Service and Cloud Asset Inventory. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.
What is the AWS equivalent of Azure Policy?
The AWS equivalent of Azure Policy is AWS Config. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.
What is the Google Cloud equivalent of Azure Policy?
The Google Cloud equivalent of Azure Policy is Organization Policy Service and Cloud Asset Inventory. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.
What is the AWS equivalent of Organization Policy Service?
The AWS equivalent of Organization Policy Service is AWS Config. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.
What is the Azure equivalent of Organization Policy Service?
The Azure equivalent of Organization Policy Service is Azure Policy. They do the same job, but differ in features, limits or pricing, so check the notes below before migrating.