Account Management | AWS Organizations (Root) | Azure Tenant (Microsoft Entra ID) | Google Cloud Organization | OCI Tenancy | Cloudflare Account | Top-level organizational structure for managing users, groups, and applications |
Account Management | AWS Account | Azure Subscription | Google Cloud Project | OCI Compartment | Cloudflare Zone | Logical unit for services linked to billing and resource management boundaries |
Account Management | Organizational Units (OUs) | Management Groups | Folders | Compartment Hierarchy | — | Hierarchical structures for organizing and managing resources across multiple accounts/subscriptions |
Account Management | IAM Roles for Workloads | Managed Identities | Service Accounts | Dynamic Groups | Access Service Tokens | Workload identities for applications and automated services |
Account Management | Cost Management | Cost Management + Billing | Cloud Billing | Billing & Cost Management | Billing | Billing, budgets, and cost tracking |
Account Management | Service Quotas | Service Quotas | Cloud Quotas | Service Limits | — | Service quotas and usage limits |
Account Management | Resource Groups & Tags | Resource Groups & Tags | Tags & Labels | Tags | — | Tagging and grouping resources for organization and cost allocation |
Account Management | Control Tower | Azure Landing Zones | Landing Zones | OCI Landing Zones | — | Reference architecture for secure multi-account setup |
AI Services | Rekognition | Azure AI Vision | Vision AI | OCI Vision | Workers AI (Inference) | Image and video analysis |
AI Services | Polly | Azure AI Speech (Text-to-Speech) | Text-to-Speech | OCI Speech (Text-to-Speech) | — | Text-to-speech synthesis |
AI Services | Transcribe | Azure AI Speech (Speech-to-Text) | Speech-to-Text | OCI Speech (Speech-to-Text) | — | Automatic speech recognition and transcription |
AI Services | Translate | Azure Translator | Cloud Translation | OCI Language | — | Neural machine translation |
AI Services | Comprehend | Azure AI Language | Natural Language AI | OCI Language | — | Natural language processing and text analytics |
AI Services | Lex | Azure AI Language (Conversational) | Dialogflow | Oracle Digital Assistant | — | Conversational interfaces and chatbots |
AI Services | Textract | Azure AI Document Intelligence | Document AI | OCI Document Understanding | — | Document data extraction (OCR) |
AI Services | OpenSearch Service | Azure AI Search | Vertex AI Search | Search with OpenSearch | Vectorize | Managed search and vector retrieval service |
AI Services | Rekognition Content Moderation | Azure AI Content Safety | — | — | — | Detect and moderate harmful content |
Big Data | EMR | HDInsight | Dataproc | Big Data Service | — | Managed Hadoop and Spark service |
Big Data | Kinesis | Event Hubs | Pub/Sub | Streaming | — | Real-time data streaming |
Big Data | MSK | Event Hubs | Pub/Sub | Streaming (Kafka) | — | Managed Kafka clusters |
Business Intelligence | QuickSight | Power BI | Looker | Oracle Analytics Cloud | Web Analytics | Analytics and visualization tools |
Business Intelligence | QuickSight (Embedded) | Power BI Embedded | Looker (Embedded) | Oracle Analytics Cloud (Embedded) | — | Embedded analytics and dashboards for applications |
Communication | SES | Azure Communication Services Email | — | Email Delivery | Email Service (Email Sending) | Email sending service |
Communication | Pinpoint | Communication Services (SMS/Voice) | — | — | — | SMS and voice messaging APIs |
Compute | EC2 | Virtual Machines | Compute Engine | OCI Compute | — | On-demand pay-as-you-go virtual machines |
Compute | VMware Cloud on AWS | Azure VMware Solution | Google Cloud VMware Engine | Oracle Cloud VMware Solution | — | Enables migration of VMware vSphere environments |
Compute | AWS ParallelCluster | Azure CycleCloud | Cluster Toolkit | OCI HPC | — | Facilitates creation and management of HPC clusters |
Compute | AWS Auto Scaling | Virtual Machine Scale Sets | Managed Instance Groups | Autoscaling | Workers (auto-scale) | Automatic scaling of compute resources |
Compute | AWS Batch | Azure Batch | Batch | — | — | Managed batch processing service |
Compute | Lambda | Azure Functions | Cloud Run functions | OCI Functions | Workers | Serverless compute service |
Compute | Elastic Beanstalk | App Service | App Engine | — | Pages | Platform as a Service for web apps |
Compute | EC2 Bare Metal Instances | BareMetal Infrastructure | Bare Metal Solution | OCI Bare Metal | — | Bare metal servers for non-virtualized workloads |
Compute | EC2 GPU Instances | GPU VMs (N-series) | GPU Compute | OCI GPU Instances | — | GPU-accelerated compute instances |
Compute | EC2 Spot Instances | Spot VMs | Spot VMs | Preemptible Instances | — | Interruptible capacity at discounted prices |
Compute | Amazon Machine Image (AMI) | Managed Images / Azure Compute Gallery | Custom Images | Custom Images | — | Pre-configured machine images for compute instances |
Compute | EC2 Instance Connect | Serial Console / Run Command | Serial Console & OS Login | Instance Console Connection | — | Direct instance shell and serial console access |
Compute | Placement Groups | Proximity Placement Groups | Compact Placement Policy | Cluster Networks | — | Low-latency instance placement control |
Compute | Outposts | Azure Stack Hub | Distributed Cloud Edge | Roving Edge Infrastructure | — | On-premises hybrid cloud extension |
Containers | ECS | Container Instances | Cloud Run | Container Instances | — | Managed container execution service |
Containers | Fargate | Azure Container Apps | Cloud Run | Container Instances | Containers | Serverless container runtime for running containerized apps |
Containers | ECR | Azure Container Registry | Artifact Registry | Container Registry | — | Managed container image registry |
Containers | EKS | AKS | GKE | OKE | — | Managed Kubernetes service |
Containers | App Mesh | Istio add-on for AKS | Cloud Service Mesh | Service Mesh | — | Service mesh for microservices |
Data Governance | Glue Data Catalog | Microsoft Purview | Dataplex | Data Catalog | — | Unified data governance solution |
Data Governance | Lake Formation | Microsoft Purview | Dataplex | Data Catalog | — | Data lake access control and security |
Data Governance | Macie | Microsoft Purview | Sensitive Data Protection | Data Safe | — | Sensitive data discovery and classification |
Data Integration | Glue | Data Factory | Dataflow | Data Integration | — | Managed ETL service |
Data Integration | MWAA | Fabric Apache Airflow | Cloud Composer | — | — | Managed workflow orchestration |
Data Integration | AppFlow | Logic Apps | Application Integration | Integration Cloud | — | Low-code data flow automation |
Data Integration | Step Functions | Logic Apps | Workflows | Process Automation | Workflows | Workflow orchestration service |
Data Integration | EventBridge Pipes | Event Grid | Eventarc | Events | — | Point-to-point event integration |
Data Lakes | Lake Formation | OneLake | Dataplex | Data Lake | — | Data lake platform and governance capabilities |
Data Lakes | Athena | Serverless SQL pool (Synapse) | BigQuery | — | — | Serverless query engine |
Data Migration | DMS | Database Migration Service | Database Migration Service | Zero Downtime Migration | — | Cloud migration service |
Data Migration | DataSync | Data Box | Storage Transfer Service | — | — | Offline and online bulk data transfer |
Data Warehousing | Redshift | Synapse Analytics | BigQuery | Autonomous Data Warehouse | — | Petabyte-scale data warehouse |
Data Warehousing | Redshift Spectrum | OneLake Shortcuts | BigLake | Autonomous Database (external tables) | — | Query external data without movement |
Database | RDS | Azure SQL Database | Cloud SQL | Base Database Service | D1 | Managed relational database service |
Database | RDS for MySQL | Database for MySQL | Cloud SQL for MySQL | MySQL Database Service | — | Managed MySQL database |
Database | RDS for PostgreSQL | Database for PostgreSQL | Cloud SQL for PostgreSQL | PostgreSQL Service | — | Managed PostgreSQL database |
Database | Aurora Serverless | SQL Database Serverless | AlloyDB | Autonomous Database | D1 | Auto-scales compute based on demand |
Database | DynamoDB | Cosmos DB | Firestore | NoSQL Database | Workers KV | Managed NoSQL data store |
Database | DocumentDB | Cosmos DB | Firestore | NoSQL Database | — | Document database service |
Database | Neptune | Cosmos DB | Neo4j (on GCP) | Graph Studio | — | Graph database service |
Database | ElastiCache | Cache for Redis | Memorystore | OCI Cache | Workers KV | In-memory caching service |
Database | MemoryDB for Redis | Cache for Redis | Memorystore for Redis | OCI Cache with Redis | — | High-performance Redis-compatible store |
Database | RDS Proxy | — | Cloud SQL Proxy | Connection Pooling | Hyperdrive | Database connection proxy and pooling |
Generative AI | Bedrock | AI Foundry | Vertex AI (Model Garden) | Generative AI | Workers AI | Foundation model platform |
Generative AI | Amazon Q | Copilot in Azure | Gemini for Google Cloud | — | — | AI assistant for cloud operations |
Generative AI | Bedrock Knowledge Bases | Azure OpenAI On Your Data | Vertex AI RAG Engine | AI Vector Search | AutoRAG | Managed retrieval-augmented generation (RAG) and knowledge grounding |
Governance | Service Control Policies (SCPs) | Azure Policy | Organization Policies | OCI Governance Rules | — | Governance enforcement for compliance standards |
Governance | AWS Config | Azure Resource Graph / Policy Compliance | Asset Inventory / Policy Analyzer | Cloud Guard Config | — | Resource compliance and configuration auditing |
Infrastructure | CloudFormation | ARM Templates | Infrastructure Manager | Resource Manager | Terraform | Infrastructure as code templates |
Infrastructure | Management Console | Portal | Cloud Console | Console | Dashboard | Web-based management interface |
Infrastructure | CLI | CLI | gcloud CLI | OCI CLI | Wrangler CLI | Command-line interface |
Infrastructure | CloudShell | Cloud Shell | Cloud Shell | Cloud Shell | — | Browser-based cloud shell |
Infrastructure | Service Catalog | Managed Applications | Private Catalog | Service Catalog | — | Governed service catalog for provisioning |
IoT | IoT Core | IoT Hub | — | OCI IoT Platform | — | IoT device connectivity and data ingestion |
Machine Learning | SageMaker | Azure Machine Learning | Vertex AI | Data Science | — | End-to-end ML platform |
Machine Learning | SageMaker Autopilot | Automated ML | Vertex AI AutoML | AutoML | — | Automated machine learning |
Machine Learning | SageMaker (Inference) | Azure Machine Learning (Endpoints) | Vertex AI (Prediction) | OCI Data Science (Model Deployment) | Workers AI | Model inference and serving |
Messaging | SQS | Queue Storage / Service Bus | Pub/Sub | Queue | Queues | Message queue service |
Messaging | SNS | Service Bus / Event Grid | Pub/Sub | Notifications | — | Pub/sub messaging service |
Messaging | EventBridge | Event Grid | Eventarc | Events | — | Event routing service |
Messaging | MQ | Service Bus | Cloud Tasks | Advanced Queuing | — | JMS 2.0 API compatible messaging |
Monitoring | CloudWatch | Azure Monitor | Cloud Monitoring | Monitoring | Analytics | Monitoring and observability service |
Monitoring | CloudTrail | Activity Log | Cloud Logging | Audit | Audit Logs | Audit and compliance logging |
Monitoring | Systems Manager | Automation | Cloud Operations | OS Management | — | Operations management service |
Monitoring | X-Ray | Application Insights | Cloud Trace | APM Trace Explorer | Workers Trace / Observability | Distributed tracing and observability |
Monitoring | CloudWatch Synthetics | Application Insights Availability | Uptime Checks | Health Checks | Workers Analytics / Speed Brain | Synthetic monitoring and uptime checks |
Networking | VPC | Virtual Network | VPC | VCN | — | Private network in the cloud |
Networking | NAT Gateway | NAT Gateway | Cloud NAT | NAT Gateway | — | Outbound Internet connectivity |
Networking | Route Tables | User Defined Routes | Routes | Route Tables | — | Custom network routing |
Networking | Site-to-Site VPN | VPN Gateway | Cloud VPN | Site-to-Site VPN | Magic WAN | VPN connectivity up to 10 Gbps |
Networking | Direct Connect | ExpressRoute | Cloud Interconnect | FastConnect | Network Interconnect | Dedicated private network connections |
Networking | Network Load Balancer | Load Balancer | Network Load Balancing | Network Load Balancer | Load Balancing | Layer 4 TCP/UDP load balancing |
Networking | Application Load Balancer | Application Gateway | Cloud Load Balancing | Load Balancer | Load Balancing | Layer 7 application load balancing |
Networking | Route 53 | DNS | Cloud DNS | DNS | DNS | Domain name system service |
Networking | Route 53 | Traffic Manager | Cloud DNS | Traffic Management | Load Balancing (Traffic Steering) | DNS-level traffic routing |
Networking | Global Accelerator | Traffic Manager | Cloud Load Balancing | Traffic Management | Argo Smart Routing | Global routing and performance |
Networking | CloudFront | CDN | Cloud CDN | CDN | CDN | Content delivery network |
Networking | PrivateLink | Private Link | Private Service Connect | Private Endpoint | — | Private connectivity to PaaS |
Networking | VPC Endpoints | Private Endpoint | Private Service Connect | Service Gateway | — | Private endpoint connectivity |
Networking | VPC Peering | Virtual Network Peering | VPC Peering | VCN Peering | — | Connect virtual networks |
Networking | Transit Gateway | Virtual WAN | Network Connectivity Center | DRG (Dynamic Routing Gateway) | — | Multi-environment network connectivity |
Networking | VPC Flow Logs | Network Watcher | VPC Flow Logs | VCN Flow Logs | Network Analytics | Network traffic monitoring |
Networking | API Gateway | API Management | API Gateway | API Gateway | API Shield | API management and security |
Networking | Network Firewall | Azure Firewall | Cloud NGFW | OCI Network Firewall | Magic Firewall | Managed cloud network firewall |
Networking | Shield | DDoS Protection | Cloud Armor (DDoS protection) | DDoS Protection (built-in) | Magic Transit / Advanced DDoS | Distributed denial-of-service (DDoS) protection |
Networking | Elastic IP | Static Public IP | Static External IP | Reserved Public IP | — | Static public IP address for dynamic cloud resources |
Networking | Security Groups | Network Security Group | VPC Firewall Rules | Network Security Groups | — | Virtual firewall for compute instances |
Networking | Subnet | Subnet | Subnet | Subnet | — | Network segmentation within a VPC/VNet |
Networking | Bastion Hosts | Azure Bastion | Identity-Aware Proxy (TCP Forwarding) | Bastion Service | Cloudflare Tunnel (Bastion) | Managed bastion and secure shell access |
Networking | Elastic Network Interface | Network Interface | Network Interface | VNIC | — | Virtual network interface for compute instances |
Networking | Internet Gateway | — | — | Internet Gateway | — | Gateway for Internet access from a VPC |
Networking | Private DNS | Private DNS | Cloud DNS (Private Zones) | Private DNS | — | Private DNS resolution inside VPC/VNet |
Networking | Client VPN | VPN Gateway (P2S) | Cloud VPN (Client) | Client VPN | Cloudflare Access (Private Network) | Managed client-to-site VPN access |
Networking | Cloud Map | — | Service Directory | Service Discovery | Cloudflare Service Discovery | Service registry and discovery |
Security & Identity | IAM Roles & Resource-Based Policies | Azure RBAC | IAM & Service Accounts | OCI IAM Policies | Access Policies | Cross-account/subscription access management |
Security & Identity | IAM | Microsoft Entra ID | Cloud Identity / IAM | IAM | Access | Identity and access management |
Security & Identity | IAM Identity Center | Microsoft Entra ID | Cloud Identity | Identity Domains | Zero Trust | Centralized identity management with SSO |
Security & Identity | Organizations | Management Groups | Resource Manager | Tenancy | Account | Hierarchical account management |
Security & Identity | Directory Service | Entra Domain Services | Managed Service for Microsoft AD | Microsoft AD | — | Managed directory services |
Security & Identity | MFA | Entra MFA | 2-Step Verification | MFA | Access (MFA) | Multi-factor authentication |
Security & Identity | KMS | Key Vault | Cloud KMS | Vault | — | Key management service |
Security & Identity | WAF | Web Application Firewall | Cloud Armor | WAF | WAF | Web application firewall |
Security & Identity | Secrets Manager | Key Vault Secrets | Secret Manager | Vault (Secrets) | — | Secrets management service |
Security & Identity | Cognito | Microsoft Identity Platform | Identity Platform | Identity Cloud Service | Access | Complete identity platform |
Security & Identity | WAF Bot Control | Bot Manager | reCAPTCHA Enterprise | Bot Management | Turnstile | Bot detection and mitigation |
Security & Identity | Security Hub | Defender for Cloud | Security Command Center | Cloud Guard | — | Cloud security posture management |
Security & Identity | Certificate Manager | Key Vault Certificates | Certificate Manager | Certificates | SSL / TLS | Managed SSL/TLS certificates |
Security & Identity | Network ACL | Network Security Group | VPC Firewall Rules | Security Lists | — | Subnet-level stateless traffic filtering |
Security & Identity | Private CA | Key Vault Managed HSM (Private CA) | Certificate Authority Service | OCI Certificates (Private CA) | — | Managed private certificate authority |
Security & Identity | GuardDuty | Defender for Cloud (Threat Protection) | Security Command Center (Threat Detection) | Cloud Guard (Threat Detector) | — | Intelligent threat detection |
Security & Identity | Inspector | Defender Vulnerability Management | Container Analysis / Artifact Analysis | Vulnerability Scanning | — | Automated vulnerability scanning |
Storage | S3 | Blob Storage | Cloud Storage | Object Storage | R2 | Object storage service |
Storage | EBS | Managed Disks | Persistent Disk | Block Volumes | — | Block storage for virtual machines |
Storage | EFS | Files | Filestore | File Storage | — | Managed file storage service |
Storage | Glacier | Archive Storage | Cloud Storage Archive | Archive Storage | — | Long-term archive storage |
Storage | EBS io2 Block Express | Elastic SAN | Hyperdisk | Ultra High Performance | — | High-performance block storage |
Storage | FSX for Windows File Server | Azure Files | Filestore | File Storage | — | Managed SMB file share |
Storage | FSX for Lustre | Azure Managed Lustre | Parallelstore | File Storage (NFS) | — | Managed Lustre file system for HPC |
Storage | FSX for NetApp ONTAP | Azure NetApp Files | NetApp Volumes | File Storage | — | Managed NetApp capabilities |
Storage | S3 Infrequent Access | Cool Blob Storage | Cloud Storage Nearline | Infrequent Access | — | Lower-cost tier for infrequent data |
Storage | S3 Glacier Deep Archive | Archive Access Tier | Cloud Storage Archive | Archive Storage | — | Lowest storage cost with extended recovery |
Storage | AWS Backup | Azure Backup | Backup and DR Service | Cloud Backup | — | Backup and recovery service |
Storage | DataSync | File Sync | Storage Transfer Service | Data Transfer | — | Data synchronization service |
Storage | Snowball Edge | Data Box | Transfer Appliance | Data Transfer Appliance | — | Petabyte-scale data transport |
Storage | Storage Gateway | Data Box Gateway | — | Storage Gateway | — | Hybrid storage gateway and cache |
