Intermediate · Google Cloud and comparing the clouds · topic 29 of 50 · 25 min
AWS vs Azure vs Google Cloud: the service map
Explanation
Same ideas, different names
AWS, Microsoft Azure and Google Cloud grew up separately, so they gave their services different names. Underneath, the ideas are the same: virtual machines, object storage, managed databases, networks, identity and monitoring. Once you understand a concept on one cloud, learning it on another is mostly learning new names and a few different defaults.
The service map
| Need | AWS | Azure | Google Cloud |
|---|---|---|---|
| Virtual machines | EC2 | Virtual Machines | Compute Engine |
| Autoscaling VMs | EC2 Auto Scaling groups | Virtual Machine Scale Sets | Managed instance groups |
| Serverless functions | Lambda | Azure Functions | Cloud Run functions |
| Serverless containers | ECS on Fargate | Azure Container Apps | Cloud Run |
| Managed Kubernetes | EKS | AKS | GKE |
| Container registry | ECR | Azure Container Registry | Artifact Registry |
| Object storage | S3 | Blob Storage | Cloud Storage |
| Block storage (disks) | EBS | Managed Disks | Persistent Disk and Hyperdisk |
| File storage | EFS | Azure Files | Filestore |
| Relational database | RDS and Aurora | Azure SQL Database, Azure Database for PostgreSQL and MySQL | Cloud SQL, AlloyDB, Spanner |
| NoSQL database | DynamoDB | Cosmos DB | Firestore, Bigtable |
| Data warehouse | Redshift | Synapse Analytics, Microsoft Fabric | BigQuery |
| CDN | CloudFront | Azure Front Door | Cloud CDN |
| DNS | Route 53 | Azure DNS | Cloud DNS |
| Load balancer | Elastic Load Balancing (ALB, NLB) | Load Balancer, Application Gateway | Cloud Load Balancing |
| Private network | VPC (regional) | Virtual Network, VNet (regional) | VPC (global) |
| Identity and access | IAM, IAM Identity Center | Microsoft Entra ID, Azure RBAC | Cloud IAM, Cloud Identity |
| Key management | KMS | Key Vault | Cloud KMS |
| Secrets | Secrets Manager | Key Vault | Secret Manager |
| Monitoring (metrics, alerts) | CloudWatch | Azure Monitor | Cloud Monitoring |
| Logs | CloudWatch Logs | Azure Monitor Logs (Log Analytics) | Cloud Logging |
| Native infrastructure as code | CloudFormation, CDK | ARM templates, Bicep | Infrastructure Manager (runs Terraform) |
| Message queue | SQS | Queue Storage, Service Bus queues | Pub/Sub, Cloud Tasks |
| Publish and subscribe | SNS, EventBridge | Service Bus topics, Event Grid | Pub/Sub, Eventarc |
Read the table as "close equivalents", not "identical twins". For example, a Google Cloud VPC is global while AWS and Azure networks are regional. Azure Key Vault holds both keys and secrets, where AWS splits them into KMS and Secrets Manager. Terraform works on all three clouds and is the most common cross-cloud infrastructure as code tool.
How to choose a cloud
For most companies the choice is less about features, which are similar, and more about people, money and rules. Work through these factors in order.
- Team skills: a team that already knows AWS will ship faster on AWS. Retraining takes months.
- Existing Microsoft investment: companies on Microsoft 365, Entra ID, Windows Server and SQL Server licences often get discounts and smoother integration on Azure (for example through Azure Hybrid Benefit).
- Data and AI needs: strong analytics teams often like BigQuery; teams using a specific AI model or platform go where it runs best.
- Credits: startup programmes from all three clouds give credits. They help in year one, but do not choose a cloud only for credits.
- Region availability: check that the services you need exist in the regions you need. AWS (ap-south-1 Mumbai, ap-south-2 Hyderabad), Azure (Central India, South India, West India) and Google Cloud (asia-south1 Mumbai, asia-south2 Delhi) all have Indian regions, but not every service is in every region.
- Pricing: compare a realistic monthly estimate with each provider's calculator, including data transfer out, which is easy to forget.
- Compliance: regulated sectors such as banking, insurance and health must meet rules from bodies like the RBI and IRDAI about where data lives. Check certifications and data-residency options.
Multi-cloud, honestly
Multi-cloud means using more than one cloud provider. It happens for good reasons: a company acquires another that runs on a different cloud, or a team picks BigQuery for analytics while the main app runs on AWS. It is also sometimes sold as a way to avoid lock-in or survive a whole-provider outage.
Be honest about the cost. Every extra cloud means another identity system, another billing model, another network to secure, another set of skills to hire for, and data transfer charges between clouds. Running the same app actively on two clouds is hard and expensive. For most small and medium teams, one primary cloud done well, with portable tools such as containers and Terraform, is the sensible choice.
Need help?
Stuck on a word or an idea? Search this course, or every course, and jump straight to the explanation or a worked question.
Try:
Watch the lesson
AWS vs Azure vs Google Cloud: the service map · 1/7
AWS, Azure and Google Cloud offer the same building blocks under different names.
Prefer a video by a teacher? Find free videos on “aws vs azure vs google cloud services comparison” on YouTube ↗
In real life: An NBFC in Chennai picks its cloud
A non-banking finance company in Chennai is moving its loan app to the cloud. The IT team uses Microsoft 365 and Entra ID, owns Windows Server and SQL Server licences, and must keep customer data in India under RBI rules. They compare monthly estimates for Azure (Central India) and AWS (Mumbai). Azure wins because existing licences lower the cost and single sign-on already works. Later, the analytics team wants BigQuery. Instead of a second cloud for everything, they export a daily anonymised dataset to BigQuery in asia-south1 and accept one small, well-defined multi-cloud link.
Practice (0/3 done)
The SERVICES table maps equivalent services between clouds (keys "aws", "azure" and "gcp"). Write equivalent(service, fromCloud, toCloud) that finds the row where the fromCloud name matches service and returns the toCloud name. Ignore upper and lower case in the cloud keys and in the service name, and ignore spaces around the service name. Return null when there is no match.
A team moving from AWS to Azure asks where their secrets from AWS Secrets Manager and their keys from AWS KMS should go. What is the best answer?
A 12-person edtech startup in Jaipur builds a video course platform. The developers know some AWS, the founders use Google Workspace, they have startup credits offered by two clouds, and most users are in India. Write a one-page recommendation: which cloud, which 6 to 8 core services, and why. Include one risk and how you will handle it.
Quick quiz
Read more (free)
Related help
Before this, learn
This topic builds on these. If something here feels new, open them first.
Related topics
- The command line on all three cloudsGoogle Cloud and comparing the clouds · same module
- Google Cloud structure: projects, billing and IAMGoogle Cloud and comparing the clouds · same module
- Terraform for the cloudInfrastructure as code
- The shared responsibility modelCyber Security: from zero to SOC analyst · Cloud security basics
- Choosing where to run a containerContainers in the cloud
- Logging and monitoring in the cloudCyber Security: from zero to SOC analyst · Cloud security basics
Questions people ask about this
Open a question to see the answer and why. The first ones are this topic's own quiz, so try the quiz above before you peek.
What is the Azure equivalent of Amazon S3?
Answer: Blob Storage
Blob Storage is Azure's object storage, like S3 and Google Cloud Storage.
What is the closest Google Cloud equivalent of AWS Lambda?
Answer: Cloud Run functions
Cloud Run functions (formerly Cloud Functions) run single functions on events, like Lambda.
Which fact is the strongest reason for a company to choose Azure?
Answer: The company already relies on Microsoft 365, Entra ID and owns Windows Server and SQL Server licences
Existing Microsoft investment brings integration and licence savings. The other options are not true.
Which statement about multi-cloud is most honest?
Answer: It adds identity, networking, billing and skills overhead, so it needs a clear reason
Multi-cloud can be justified, but every extra cloud adds work and data transfer cost.
Which service is Azure's identity platform, used for sign-in and single sign-on?
Answer: Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is Azure's identity service.
How is a VPC network scoped in Google Cloud?Related
Answer: Global, with regional subnets
Google Cloud VPC networks are global resources; each subnet lives in one region.
What protects VMs against a whole datacentre in a region going down?Related
Answer: Spreading them across availability zones
Zones are physically separate datacentres. An availability set only spreads VMs across racks in one datacentre.
Which AWS CLI option filters the output on your machine using JMESPath?Related
Answer: --query
--query takes a JMESPath expression and filters the JSON before it is printed.
Which command checks the syntax and references of your .tf files without contacting the cloud to plan changes?Related
Answer: terraform validate
validate checks the configuration itself. plan is the step that compares it with real infrastructure.
Pass the quiz (60% or more) or mark this topic as done when you are ready.
Your progress is saved on this device only.
Next steps
- 1 more topic in “Google Cloud and comparing the clouds” before its exam: The command line on all three clouds.
- Module 7 exam: Google Cloud and comparing the clouds · 12 questions · 20 min, without help. 4 topics of this module still to finish first.
- Then the next module, Containers in the cloud. 50 topics left in the course before the final exam.