Amazon Web Services services and their Azure equivalents
268 AWS services mapped to Azure across 7 categories, including retired and maintenance-mode services.
Compute(35)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon EC2 | Resizable virtual servers (instances) on the Nitro System, with On-Demand, Spot, Savings Plans, Reserved Instance, and Dedicated purchase options. | Azure Virtual Machines |
| Amazon EC2 Auto Scaling | Auto Scaling groups that keep a target number of instances healthy and scale with target tracking, step, scheduled, or predictive policies. Mixed instances… | Azure Virtual Machine Scale Sets |
| Amazon EC2 bare metal instances | .metal sizes of many instance families. They give the OS direct access to the processor and memory, with no AWS hypervisor, for nested virtualization, special… | Azure Dedicated Host, Azure VMware Solution |
| Amazon EC2 Dedicated Hosts & Dedicated Instances | Physical servers dedicated to your account. Dedicated Hosts expose sockets and cores for per-core/per-socket BYOL and give host affinity. Dedicated Instances… | Azure Dedicated Host |
| Amazon EC2 hibernation | Suspend-to-disk for EC2. RAM is saved to the encrypted EBS root volume and restored on start, so warmed-up apps resume quickly. | Azure VM hibernation |
| Amazon EC2 instance types | Instance families by workload (general purpose M/T, compute C, memory R/X/U, storage I/D/H, accelerated P/G/Inf/Trn, HPC Hpc). Each family uses a generation… | Azure VM sizes (series) |
| Amazon EC2 Mac instances | Bare-metal Apple Mac mini and Mac Studio hardware (Intel, M1, M1 Ultra, M2, M2 Pro, M4, M4 Pro) for macOS and iOS builds. Runs only on Dedicated Hosts with a… | None |
| Amazon EC2 Reserved Instances | A 1- or 3-year billing discount for a specific instance configuration. Standard RIs can be modified and resold on the RI Marketplace. Convertible RIs can be… | Azure Reservations (Reserved VM Instances) |
| Amazon EC2 Spot Instances | Spare EC2 capacity at a steep discount that can be interrupted with a two-minute notice, plus rebalance-recommendation signals. | Azure Spot Virtual Machines |
| Amazon Elastic VMware Service (EVS) | Self-managed (or partner-managed) VMware Cloud Foundation that AWS deploys onto EC2 bare metal inside your VPC. You bring a portable VCF subscription from… | Azure VMware Solution |
| Amazon Lightsail | Simplified virtual private servers, containers, managed databases, CDN, load balancers, and DNS bundled at fixed monthly prices. | None |
| Amazon Machine Images (AMIs) | Regional launch images (EBS snapshots plus launch metadata) that you can share with accounts, organizations, or publicly, and copy across Regions. | Azure Compute Gallery (and legacy managed images) |
| Amazon WorkSpaces (Personal & Pools) | Managed cloud desktops on Windows, Ubuntu, Rocky Linux, or RHEL. Personal gives persistent per-user desktops, and Pools gives non-persistent ones. | Azure Virtual Desktop, Windows 365 (Cloud PC) |
| Amazon WorkSpaces Applications (formerly AppStream 2.0) | Managed application streaming. Desktop apps run on AWS fleets and stream to a client or HTML5 browser. | Azure Virtual Desktop |
| AMD SEV-SNP on Amazon EC2 | Memory encryption and attestation with AMD SEV-SNP on supported AMD-based instance types (M6a, C6a, and R6a at the time of verification), for shared tenancy… | Azure confidential computing (confidential VMs & enclaves) |
| AWS Batch | Managed batch job scheduler. It runs containerized jobs and array jobs on EC2 (including Spot), Fargate, or EKS compute environments, using job queues and… | Azure Batch |
| AWS Compute Optimizer | Rightsizing and idle-resource recommendations for EC2, Auto Scaling groups, EBS, Lambda, ECS on Fargate, RDS/Aurora, commercial licenses, and more, based on… | Azure Advisor |
| AWS Elastic Beanstalk | Upload-your-code web app platform. Standard mode runs apps on EC2 with load balancing and scaling. The newer Cluster mode runs apps on a service-operated EKS… | Azure App Service |
| AWS Graviton (Arm-based EC2) | AWS-designed Arm64 server CPUs behind the "g" instance families. Graviton4 (M8g/C8g/R8g/X8g) is widely available, and Graviton5-based M9g/C9g/R9g families… | Azure Cobalt (Arm-based VMs) |
| AWS License Manager | Track and enforce software license rules (vCPU, core, socket, instance) across EC2, on-premises servers, and Dedicated Hosts. Also offers license-included… | Azure Hybrid Benefit |
| AWS Local Zones | AWS-operated infrastructure in metro areas, extending a parent Region with EC2, EBS, and selected services for single-digit-ms latency or data residency. | Azure Extended Zones |
| AWS Nitro Enclaves | Isolated, hardened VMs carved out of an EC2 instance's vCPUs and memory, with no network, storage, or interactive access. Attestation integrates with AWS KMS. | Azure confidential computing (confidential VMs & enclaves) |
| AWS Outposts (racks & servers) | AWS-owned and AWS-managed hardware in your data center, as 42U racks or 1U/2U servers, running EC2, EBS, and selected services as an extension of a Region. | Azure Local (formerly Azure Stack HCI) |
| AWS Parallel Computing Service (PCS) | Fully managed Slurm. AWS runs the Slurm controller, and you define compute node groups and queues. | Azure CycleCloud & CycleCloud Workspace for Slurm |
| AWS ParallelCluster | AWS-supported, open-source CLI/API/UI for deploying self-managed Slurm HPC clusters. From v3.16.0 the AWS Batch scheduler option is no longer supported. | Azure CycleCloud & CycleCloud Workspace for Slurm |
| AWS Systems Manager Patch Manager | Scans and installs OS and application patches on managed nodes, using patch baselines, maintenance windows, and Quick Setup patch policies across accounts and… | Azure Update Manager |
| AWS Systems Manager Session Manager | Browser or CLI shell access and port forwarding to managed nodes through the SSM Agent, with no open inbound ports, bastion hosts, or SSH keys. Sessions are… | Azure Bastion |
| AWS Wavelength | AWS compute and storage inside telecom carriers' 5G networks (Wavelength Zones), reached through a carrier gateway. | Azure Extended Zones |
| EC2 Image Builder | Managed pipelines that build, test, and distribute hardened AMIs and container images on a schedule. | Azure VM Image Builder |
| EC2 Instance Connect Endpoint | A VPC endpoint for SSH or RDP to instances that have no public IP address, authorized with IAM. | Azure Bastion |
| EC2 On-Demand Capacity Reservations | Reserve capacity for an instance type in an AZ, either immediately with no commitment or future-dated with a commitment. Billed at On-Demand rates whether you… | Azure on-demand capacity reservation |
| EC2 placement groups | Placement strategies. Cluster packs instances for low-latency HPC. Partition keeps groups on separate racks. Spread puts each instance on distinct hardware.… | Proximity placement groups & availability sets |
| Elastic Fabric Adapter (EFA) | An OS-bypass network interface (SRD protocol) for MPI and NCCL traffic on supported instance types. | InfiniBand on Azure HPC and GPU VMs |
| NitroTPM & UEFI Secure Boot | A virtual TPM 2.0 plus UEFI Secure Boot for EC2 instances launched from AMIs configured for them. Enables measured boot and BitLocker-style key sealing. | Trusted Launch for Azure VMs |
| Savings Plans (Compute & EC2 Instance) | A 1- or 3-year $/hour spend commitment. Compute Savings Plans apply across EC2 family, size, OS, tenancy, and Region, plus Fargate and Lambda. EC2 Instance… | Azure savings plan for compute |
Containers & Serverless(32)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon API Gateway | Managed REST APIs (usage plans, API keys, caching, private APIs), lower-cost HTTP APIs, and WebSocket APIs, fronting Lambda, HTTP backends, or AWS services. | Azure API Management |
| Amazon ECR | Private and public OCI registries with lifecycle policies, scan-on-push (basic or enhanced through Inspector), cross-Region and cross-account replication,… | Azure Container Registry |
| Amazon ECS | AWS's own container orchestrator (task definitions, services, clusters). Capacity options are Fargate, ECS Managed Instances, EC2 capacity providers, and ECS… | Azure Container Apps |
| Amazon ECS Express Mode | One API call (container image plus two IAM roles) creates a Fargate ECS service with an HTTPS URL, ALB with TLS, auto scaling, monitoring, and networking. No… | Azure Container Apps, Azure App Service |
| Amazon ECS Service Connect | Built-in service discovery and service-to-service traffic for ECS (managed Envoy proxy plus Cloud Map namespaces), with retries, timeouts, and traffic… | Istio-based service mesh add-on for AKS, Open Service Mesh (OSM) add-on for AKS |
| Amazon EKS | Managed Kubernetes control plane across three AZs. You choose the nodes, which can be managed node groups, self-managed nodes, Karpenter, Fargate, Auto Mode,… | Azure Kubernetes Service (AKS) |
| Amazon EKS Auto Mode | AWS also manages the cluster's compute (Karpenter-based), pod networking, load balancing, DNS, block storage, and GPU support. Nodes are EC2 instances that… | AKS Automatic |
| Amazon EKS Capabilities (Argo CD, ACK, kro) | AWS-managed platform features that run in EKS rather than on your nodes. Argo CD for GitOps, AWS Controllers for Kubernetes (ACK) to manage AWS resources, and… | GitOps for AKS (Flux v2 and Argo CD extensions) |
| Amazon EKS Hybrid Nodes & EKS Anywhere | Hybrid Nodes attach your on-premises or edge machines to an EKS control plane running in the Region. EKS Anywhere is customer-managed Kubernetes (Cluster API)… | AKS Hybrid and Edge (AKS enabled by Azure Arc) |
| Amazon EKS Kubernetes version support (standard & extended) | Each Kubernetes minor version gets 14 months of standard support, then 12 months of extended support (on by default, billed at a higher per-cluster-hour… | AKS Kubernetes version support & Long Term Support (LTS) |
| Amazon EventBridge (event buses & Pipes) | Serverless event buses (default and custom) with rules, archive and replay, cross-account and cross-Region delivery, SaaS partner sources, API destinations,… | Azure Event Grid |
| Amazon EventBridge Scheduler | Serverless scheduler for one-time, rate, or cron schedules (with time zones) that invokes 270+ AWS services, with retries and flexible time windows. | Azure Logic Apps, Azure Functions |
| Amazon MQ | Managed Apache ActiveMQ and RabbitMQ brokers for apps that use JMS, AMQP 0-9-1, MQTT, STOMP, or OpenWire without rewriting. | Azure Service Bus |
| Amazon SNS | Pub/sub topics (Standard and FIFO) that fan out to SQS, Lambda, HTTP, Firehose, email, SMS, and mobile push, with filter policies. | Azure Service Bus, Azure Event Grid |
| Amazon SQS | Fully managed message queues. Standard queues are at-least-once with near-unlimited throughput. FIFO queues give ordered, exactly-once processing per message… | Azure Service Bus, Azure Queue Storage |
| AWS Amplify Hosting | Git-based CI/CD and hosting for static sites, SPAs, and SSR frameworks (such as Next.js) on the AWS CDN, with preview branches and custom domains. | Azure Static Web Apps |
| AWS App Mesh Retired | Envoy-based service mesh for ECS, EKS, and EC2. | Istio-based service mesh add-on for AKS, Open Service Mesh (OSM) add-on for AKS |
| AWS App Runner Maintenance | Fully managed web app and API service from source code or a container image, with automatic HTTPS, scaling, and load balancing. | Azure Container Apps, Azure App Service |
| AWS AppSync | Managed GraphQL APIs (resolvers to DynamoDB, Lambda, RDS, HTTP, and more, with merged APIs and subscriptions) and AppSync Events for serverless WebSocket… | Azure API Management, Azure Web PubSub |
| AWS Fargate | Serverless compute for ECS tasks and EKS pods. Each task or pod gets its own isolated, right-sized environment (Linux x86/Arm and Windows Server on ECS). | Azure Container Instances, Azure Container Apps |
| AWS Lambda (Event Functions) | Event-driven functions triggered by 200+ AWS services or API calls. Invocations run up to 15 minutes, with one request per execution environment, billed per… | Azure Functions |
| AWS Lambda MicroVMs | Stateful Firecracker sandboxes for running user- or AI-generated code. Each has its own HTTPS endpoint (HTTP/2, gRPC, WebSockets), suspend and resume, and… | Azure Container Apps dynamic sessions |
| AWS Lambda Web Functions | Run standard port-listening Node.js web apps (Express, Hono, Next.js) on Lambda without adapters. Each environment handles many concurrent requests, with… | Azure Container Apps, Azure App Service |
| AWS Step Functions | Visual state-machine workflows (Amazon States Language). Standard workflows are exactly-once and run up to a year. Express workflows are at-least-once and run… | Azure Logic Apps |
| EKS Pod Identity (and IRSA) | Map Kubernetes service accounts to IAM roles so pods get temporary AWS credentials. Pod Identity uses an EKS agent and association API. IAM Roles for Service… | Microsoft Entra Workload ID for AKS |
| Lambda durable functions | Multi-step workflows written as code (Durable Execution SDK) that checkpoint progress, replay after failures, and wait without compute charges. Runs up to one… | Durable Functions & Durable Task Scheduler |
| Lambda function URLs | A dedicated HTTPS endpoint for a function, with IAM (AWS_IAM) or public (NONE) auth, CORS, and response streaming. | Azure Functions |
| Lambda layers | Shared .zip archives (libraries, runtimes, config) mounted into /opt. Up to five per function, for .zip-packaged functions only. | None |
| Lambda Managed Instances | Run Lambda Event Functions on current-generation EC2 instances (including Graviton4) that Lambda manages. Multiple concurrent requests per environment, and… | Azure Functions Premium & Dedicated plans |
| Lambda provisioned concurrency | Keeps a set number of execution environments initialized for a function version or alias, so requests skip cold starts. Can be scaled with Application Auto… | Azure Functions Flex Consumption plan, Azure Functions Premium & Dedicated plans |
| Lambda SnapStart | Lambda snapshots (Firecracker) the initialized execution environment when you publish a version and resumes from the cache on cold starts. Supports Java 11+,… | Azure Functions Flex Consumption plan, Azure Functions Premium & Dedicated plans |
| Red Hat OpenShift Service on AWS (ROSA) | Managed OpenShift jointly supported by Red Hat and AWS, documented primarily as ROSA with hosted control planes (HCP). Billing goes through AWS, with service… | Azure Red Hat OpenShift |
Storage(39)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon EBS | Network block volumes for EC2 in a single AZ. SSD types gp3, gp2, io2 Block Express, and io1, and HDD types st1 and sc1. gp3 goes up to 64 TiB, 80,000 IOPS,… | Azure managed disks |
| Amazon EBS Multi-Attach | Attach one io1 or io2 volume to up to 16 Nitro instances in the same AZ. Applications must coordinate writes (a cluster-aware file system or application).… | Azure shared disks |
| Amazon EBS snapshots | Incremental point-in-time backups stored in S3-backed storage, with copy across Regions and accounts, an archive tier, fast snapshot restore, snapshot lock,… | Managed disk snapshots (incremental) |
| Amazon EC2 instance store | Physically attached local disks (often NVMe SSD) on some instance types. Included in the instance price, and the data is lost when the instance stops,… | VM temporary disks, local NVMe, and ephemeral OS disks |
| Amazon EFS | Serverless, elastic NFS (v4.0 and v4.1) file system for Linux, Regional (multi-AZ) or One Zone, with Standard, Infrequent Access, and Archive storage classes… | Azure Files |
| Amazon EKS storage CSI drivers (EBS, EFS, FSx, Mountpoint for S3) | Kubernetes CSI drivers, installable as EKS add-ons, that provision EBS volumes and mount EFS, FSx, and S3 (Mountpoint) storage as persistent volumes. EKS Auto… | Azure Container Storage and AKS CSI drivers |
| Amazon File Cache | A temporary, Lustre-based high-speed cache in front of S3 buckets or NFSv3 file systems (on premises or in AWS), loading data on first access. | Azure HPC Cache |
| Amazon FSx for Lustre | Managed Lustre parallel file system (scratch or persistent) with SSD, HDD, or Intelligent-Tiering storage classes, and links to S3 or on-premises data… | Azure Managed Lustre |
| Amazon FSx for NetApp ONTAP | Managed NetApp ONTAP file systems with NFS, SMB, iSCSI, and NVMe/TCP access, SSD plus an elastic capacity pool tier, SnapMirror, FlexCache, and S3 access… | Azure Elastic SAN, Azure NetApp Files |
| Amazon FSx for OpenZFS | Managed OpenZFS file systems over NFS (v3 to v4.2), with point-in-time snapshots, data compression, and an Intelligent-Tiering storage class. | None |
| Amazon FSx for Windows File Server | Fully managed Windows Server file systems over SMB with Active Directory integration, Single-AZ or Multi-AZ, SSD or HDD storage, DFS namespaces, shadow… | Azure Files |
| Amazon Glacier (original vault service) Maintenance | Archive storage in vaults with its own API, separate from S3 and the S3 Glacier storage classes. | Blob Storage access tiers (hot, cool, cold, archive) |
| Amazon S3 | Object storage in buckets, with 11 nines of durability, a choice of storage classes, versioning, replication, Object Lock, and fine-grained IAM and bucket… | Azure Blob Storage, Azure Data Lake Storage (hierarchical namespace) |
| Amazon S3 access control (IAM, bucket policies, presigned URLs) | Access is granted by IAM identity policies and bucket policies (ACLs are disabled by default), with Block Public Access, VPC endpoints for network control,… | Azure Storage access control (Entra RBAC, SAS, network rules) |
| Amazon S3 Access Points | Named network endpoints attached to a bucket (or an FSx volume), each with its own access policy and optional VPC-only restriction, to simplify access to… | None |
| Amazon S3 Batch Operations | Run one operation (copy, tag, restore, invoke Lambda, replicate, and more) across billions of objects from a manifest or inventory report, with tracking and… | Azure Storage Actions |
| Amazon S3 Express One Zone | A single-AZ, high-performance storage class in directory buckets, designed for consistent single-digit-millisecond access and very high request rates. 99.95%… | Premium block blob storage accounts |
| Amazon S3 Files | A shared file system linked to an S3 bucket or prefix. It mounts on EC2, Lambda, EKS, and ECS, caches actively used data on high-performance storage, and… | NFS 3.0 protocol support for Blob Storage, BlobFuse2 |
| Amazon S3 Intelligent-Tiering | A storage class that moves objects between Frequent, Infrequent (after 30 days without access), and Archive Instant (after 90 days) tiers automatically, with… | Blob Storage smart tier |
| Amazon S3 Inventory and S3 Metadata | S3 Inventory delivers scheduled CSV, ORC, or Parquet object listings. S3 Metadata keeps queryable Iceberg journal and live-inventory tables of object metadata… | Blob inventory and change feed |
| Amazon S3 Lifecycle | Bucket rules that transition objects to cheaper storage classes or expire them (current and noncurrent versions, incomplete multipart uploads), filtered by… | Blob Storage lifecycle management |
| Amazon S3 Object Lambda Maintenance | Lambda functions that transform objects as they're returned from GET, HEAD, and LIST requests. | None |
| Amazon S3 Object Lock | WORM protection for object versions, using retention periods (governance or compliance mode) and legal holds. Requires versioning. Assessed for SEC 17a-4,… | Immutable storage for Blob Storage (WORM) |
| Amazon S3 Replication (CRR, SRR, Batch Replication) | Asynchronous replication of new objects to buckets in other Regions (CRR) or the same Region (SRR), Batch Replication for existing objects, and Replication… | Blob Storage object replication, Azure Storage redundancy (LRS, ZRS, GRS, GZRS) |
| Amazon S3 storage classes | Standard, Intelligent-Tiering, Express One Zone, Standard-IA, One Zone-IA, Glacier Instant Retrieval, Glacier Flexible Retrieval, and Glacier Deep Archive.… | Blob Storage access tiers (hot, cool, cold, archive) |
| Amazon S3 Tables | Table buckets that store Apache Iceberg tables as first-class resources, with automatic maintenance (compaction, snapshot management) and access from… | Microsoft Fabric OneLake |
| Amazon S3 Vectors | Vector buckets and vector indexes for storing embeddings and running similarity queries, with subsecond latency for infrequent queries (as low as about 100 ms… | Azure AI Search |
| AWS Backup | Policy-based, centralized backup across EC2, EBS, S3, EFS, FSx, RDS, Aurora, DynamoDB, EKS, and more, plus VMware on premises, with cross-Region and… | Azure Backup |
| AWS Backup logically air-gapped vault | A vault type with compliance-mode locking, AWS-owned or customer-managed key encryption, sharing to recovery accounts through AWS RAM, and optional… | Azure Backup immutable vaults |
| AWS Data Transfer Terminal | Reservable physical locations where you bring your own storage devices and upload data to AWS over high-speed connections. | Azure Data Box |
| AWS DataSync | Managed online transfers between NFS, SMB, HDFS, object storage, other clouds (including Azure Blob Storage, Azure Files, and Google Cloud Storage), and AWS… | Azure Storage Mover, AzCopy |
| AWS Elastic Disaster Recovery (DRS) | Continuous block-level replication of physical, virtual, and cloud servers into a low-cost staging area in an AWS Region, with point-in-time recovery,… | Azure Site Recovery |
| AWS Snowball Edge (Snow Family) Retired | Rugged shippable storage and compute devices for offline data migration and edge computing. | Azure Data Box |
| AWS Storage Gateway – Amazon FSx File Gateway Maintenance | An on-premises cache for FSx for Windows File Server shares over SMB. | Azure File Sync |
| AWS Storage Gateway – Amazon S3 File Gateway | An on-premises VM or hardware appliance that exposes NFS and SMB shares backed by S3 objects, with a local cache for recent data. | Azure Data Box Gateway, Azure File Sync |
| AWS Storage Gateway – Tape Gateway | A virtual tape library (iSCSI VTL) for existing backup software, archiving virtual tapes to S3 Glacier Flexible Retrieval or Glacier Deep Archive. | None |
| AWS Storage Gateway – Volume Gateway | Cloud-backed iSCSI volumes for on-premises servers, either cached (primary data in S3, hot data local) or stored (all data local, with snapshots to AWS as EBS… | StorSimple |
| AWS Transfer Family | Managed SFTP, FTPS, FTP, and AS2 endpoints, plus web apps and SFTP connectors, storing files in S3 or EFS with service-managed, Directory Service, or custom… | SFTP support for Blob Storage |
| Mountpoint for Amazon S3 | An open-source FUSE client that mounts a bucket as a local file system on Linux, optimized for high-throughput reads and sequential writes. Not fully POSIX.… | NFS 3.0 protocol support for Blob Storage, BlobFuse2 |
Databases(34)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon Aurora DSQL | Serverless, distributed, PostgreSQL-compatible relational database with active-active single-Region (three AZs) and multi-Region clusters, strong consistency,… | None |
| Amazon Aurora Global Database | One primary Region for writes and up to 10 read-only secondary Regions, using storage-level replication, with managed switchover and failover, and optional… | Azure SQL active geo-replication and failover groups, Read replicas (PostgreSQL, MySQL) |
| Amazon Aurora MySQL-Compatible Edition | MySQL-compatible engine on Aurora's shared, three-AZ storage volume, with up to 15 read replicas, Backtrack, Global Database, and Serverless v2. | Azure Database for MySQL (flexible server) |
| Amazon Aurora PostgreSQL Limitless Database | Automated horizontal sharding for Aurora PostgreSQL, spreading data and writes across shards while you connect to a single database endpoint. | Azure Database for PostgreSQL elastic clusters, Azure Cosmos DB for PostgreSQL |
| Amazon Aurora PostgreSQL-Compatible Edition | PostgreSQL-compatible engine with a distributed storage volume that keeps copies across three AZs, up to 15 low-lag read replicas, fast cloning, Global… | Azure HorizonDB, Azure Database for PostgreSQL (flexible server) |
| Amazon Aurora Serverless v2 | Aurora capacity that scales in 0.5-ACU steps between a minimum and maximum you set, and can scale to 0 ACUs with automatic pause and resume. | Azure SQL Database serverless, SQL database in Microsoft Fabric |
| Amazon DocumentDB (with MongoDB compatibility) | MongoDB API-compatible document database with instance-based clusters (Aurora-style shared storage, standard or I/O-optimized) or elastic clusters (sharded),… | Azure DocumentDB (with MongoDB compatibility) |
| Amazon DynamoDB | Serverless key-value and document database with single-digit-millisecond performance, on-demand or provisioned capacity, transactions, point-in-time recovery,… | Azure Cosmos DB for NoSQL, Azure Table Storage and Azure Cosmos DB for Table |
| Amazon DynamoDB Accelerator (DAX) | DynamoDB-compatible, in-memory, write-through cache cluster for microsecond read latency. | Azure Cosmos DB integrated cache (dedicated gateway) |
| Amazon DynamoDB global tables | Multi-Region, multi-active tables with multi-Region eventual consistency (the default) or multi-Region strong consistency (MRSC, same-account only). The mode… | Azure Cosmos DB global distribution and multi-region writes |
| Amazon DynamoDB Streams | Time-ordered log of item-level changes kept for 24 hours, consumed by Lambda triggers or the Kinesis adapter. Kinesis Data Streams is an alternative change… | Azure Cosmos DB change feed |
| Amazon ElastiCache | Managed in-memory cache with Valkey, Redis OSS, or Memcached engines, available as serverless caches or node-based clusters. | Azure Managed Redis |
| Amazon Keyspaces (for Apache Cassandra) | Serverless, Cassandra Query Language (CQL)-compatible wide-column database with on-demand or provisioned capacity and multi-Region replication. | Azure Cosmos DB for Apache Cassandra, Azure Managed Instance for Apache Cassandra |
| Amazon MemoryDB | Durable in-memory database compatible with Valkey and Redis OSS. Writes go to a Multi-AZ transactional log, so it can serve as a primary database. | None |
| Amazon Neptune (Database and Analytics) | Managed graph database supporting property graphs (Gremlin and openCypher) and RDF (SPARQL), with read replicas, serverless capacity, and global databases.… | Azure Cosmos DB for Apache Gremlin |
| Amazon Quantum Ledger Database (QLDB) Retired | Ledger database with an immutable, cryptographically verifiable journal. | Ledger in Azure SQL Database and SQL Server |
| Amazon RDS and Aurora zero-ETL integrations | Managed, near-real-time replication of operational database data into Amazon Redshift or a SageMaker lakehouse, with no pipelines to build. | Mirroring in Microsoft Fabric |
| Amazon RDS Blue/Green Deployments | Creates a synchronized staging (green) copy of a production (blue) database for upgrades and schema changes, then switches over with built-in guardrails.… | In-place major version upgrade (PostgreSQL) |
| Amazon RDS Custom (Oracle and SQL Server) | RDS with access to the database host's operating system and database configuration, for apps that need customization, while AWS still automates backups and… | SQL Server on Azure Virtual Machines |
| Amazon RDS for Db2 | Managed IBM Db2 Standard and Advanced editions (versions 11.5 and 12.1), without shell access to the host. | None |
| Amazon RDS for MariaDB | Managed MariaDB Community Server with Multi-AZ deployments, read replicas, and automated backups. | Azure Database for MariaDB |
| Amazon RDS for MySQL | Managed MySQL Community Edition with Multi-AZ deployments, read replicas, automated backups, and Extended Support for older major versions. | Azure Database for MySQL (flexible server) |
| Amazon RDS for Oracle | Managed Oracle Database on RDS DB instances (bring your own license, or license-included for Standard Edition Two), with Multi-AZ and read replicas. | Oracle AI Database@Azure |
| Amazon RDS for PostgreSQL | Managed community PostgreSQL on EC2-based DB instances with EBS storage, automated backups and point-in-time recovery, Multi-AZ (one standby, or a… | Azure Database for PostgreSQL (flexible server) |
| Amazon RDS for SQL Server | Managed Microsoft SQL Server (Express, Web, Standard, Enterprise, and Developer editions) with license-included pricing, Multi-AZ, read replicas (Enterprise),… | Azure SQL Managed Instance, Azure SQL Database |
| Amazon RDS Multi-AZ deployments | Synchronous standby in another AZ with automatic failover (Multi-AZ DB instance), or a Multi-AZ DB cluster with two readable standbys for MySQL and PostgreSQL. | Zone-redundant high availability (PostgreSQL, MySQL, Azure SQL) |
| Amazon RDS on AWS Outposts | RDS for SQL Server, MySQL, PostgreSQL, and Oracle running on Outposts racks in your data center, managed from the AWS Region. | SQL Managed Instance enabled by Azure Arc |
| Amazon RDS Proxy | Managed connection pooler for RDS and Aurora that queues and reuses connections, speeds up failover, and can use IAM authentication with credentials in… | Built-in PgBouncer (Azure Database for PostgreSQL) |
| Amazon RDS read replicas | Asynchronous read-only copies in the same or another Region, which can be promoted to standalone instances. | Read replicas (PostgreSQL, MySQL) |
| Amazon Timestream for InfluxDB | Managed open-source InfluxDB (2.x branch) instances with optional Multi-AZ standby, for real-time time-series workloads. | None |
| Amazon Timestream for LiveAnalytics Maintenance | Serverless time-series database with memory and magnetic storage tiers and SQL queries. | Azure Data Explorer |
| AWS Database Migration Service (DMS) | Managed one-time and continuous (CDC) database replication between many sources and targets, plus DMS Schema Conversion for converting schemas and code to RDS… | Azure Database Migration Service |
| Babelfish for Aurora PostgreSQL | An extra endpoint on Aurora PostgreSQL that understands SQL Server's TDS wire protocol and common T-SQL, so some SQL Server apps can run with fewer code… | None |
| Oracle Database@AWS | Oracle Exadata Database Service (dedicated infrastructure or Exascale) and Autonomous Database, run by Oracle Cloud Infrastructure inside AWS data centers and… | Oracle AI Database@Azure |
Networking & Content Delivery(40)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon CloudFront | Global CDN for static and dynamic content, APIs, and video, with edge caching, origin shield, TLS, WAF and Shield integration, and pay-as-you-go or flat-rate… | Azure Front Door (Standard and Premium) |
| Amazon Route 53 (DNS hosting and domains) | Authoritative DNS hosting with public hosted zones, DNSSEC signing, and domain registration. | Azure DNS (public zones) |
| Amazon VPC | Logically isolated virtual network in a Region, with your own IPv4 and IPv6 ranges, subnets, route tables, gateways, and security controls. | Azure Virtual Network |
| Amazon VPC IP Address Manager (IPAM) | Plans, allocates, tracks, and audits IP addresses across accounts and Regions with hierarchical pools and compliance monitoring. | Azure Virtual Network Manager |
| Amazon VPC Lattice | Application networking service that connects, secures, and monitors service-to-service and resource traffic across VPCs and accounts, with IAM auth policies. | Azure Private Link and private endpoints, Application Gateway for Containers, Azure API Management |
| Amazon VPC Route Server | Peers with appliances in your VPC over BGP and dynamically updates VPC, subnet, and internet gateway route tables for routing fault tolerance. | Azure Route Server |
| Application Load Balancer | Layer 7 load balancer with host, path, header, and query routing, TLS offload, authentication (OIDC and Cognito), gRPC, WebSockets, and Lambda targets. | Azure Application Gateway (v2), Application Gateway for Containers |
| AWS Client VPN | Managed OpenVPN-based remote-access VPN with certificate, Active Directory, or SAML federated authentication. | Azure VPN Gateway point-to-site |
| AWS Cloud WAN | Managed global network built from a central, policy-defined core network, with segments and core network edges in the Regions you choose. | Azure Virtual WAN, Azure Virtual Network Manager |
| AWS Direct Connect | Dedicated or hosted private connections from your network to AWS at Direct Connect locations, with private, public, and transit virtual interfaces. | Azure ExpressRoute |
| AWS Firewall Manager | Centrally applies WAF, Shield Advanced, security group, Network Firewall, and DNS Firewall policies across accounts in AWS Organizations. | Azure Firewall Manager |
| AWS Global Accelerator | Static anycast IP addresses that route TCP and UDP traffic over the AWS global network to the best healthy regional endpoint. | Azure global (cross-region) load balancer |
| AWS Network Firewall | Managed, stateful network firewall and IPS for VPCs, with Suricata-compatible rules, domain filtering, TLS inspection, and AWS-managed threat signatures. | Azure Firewall |
| AWS PrivateLink (interface endpoints) | Private access to AWS services, your own endpoint services, and partner services through elastic network interfaces in your subnets. | Azure Private Link and private endpoints |
| AWS Shield (Standard and Advanced) | DDoS protection. Shield Standard is automatic and free. Shield Advanced adds protection for specific resources, the Shield Response Team, cost protection, and… | Azure DDoS Protection |
| AWS Site-to-Site VPN | IPsec VPN connections with two tunnels each, terminating on a virtual private gateway, transit gateway, or Cloud WAN. Large bandwidth tunnels (up to 5 Gbps)… | Azure VPN Gateway (site-to-site) |
| AWS Transit Gateway | Regional cloud router that connects VPCs, VPNs, Direct Connect, and peered transit gateways in a hub-and-spoke design, with multiple route tables for… | Azure Virtual WAN, Azure Virtual Network Manager |
| AWS WAF | Web application firewall for CloudFront, ALB, API Gateway, AppSync, Cognito, App Runner, and Verified Access, with managed rule groups, rate limiting, bot… | Azure Web Application Firewall |
| CloudFront Functions | Lightweight JavaScript functions that run at CloudFront edge locations on viewer requests and responses, with sub-millisecond startup and an optional… | Azure Front Door rule sets, Azure Front Door edge actions |
| Direct Connect gateway | Global resource that connects Direct Connect virtual interfaces to VPCs and transit gateways in any Region (except China). With SiteLink enabled on virtual… | ExpressRoute Global Reach |
| Elastic IP addresses (and BYOIP) | Static public IPv4 addresses you allocate to your account and remap between resources. You can also bring your own IP ranges (BYOIP). | Public IP addresses and prefixes |
| Gateway Load Balancer | Transparently inserts fleets of third-party virtual appliances (firewalls, IDS) into traffic paths using GENEVE encapsulation and GWLB endpoints. | Azure Gateway Load Balancer |
| Gateway VPC endpoints | Free route-table targets that give a VPC private access to Amazon S3 and DynamoDB without an internet or NAT gateway. | Virtual network service endpoints |
| Internet gateway (and egress-only internet gateway) | Horizontally scaled VPC component that allows internet traffic to and from resources with public IPs. The egress-only variant allows outbound-only IPv6. | Public IP addresses and prefixes, Private subnets (default outbound access off) |
| Lambda@Edge | Node.js or Python Lambda functions authored in US East (N. Virginia) and run at AWS locations close to viewers, triggered on CloudFront viewer and origin… | None |
| NAT gateway (zonal and regional) | Managed NAT that lets private subnets reach the internet or other networks. Zonal NAT gateways live in one AZ; regional NAT gateways expand across AZs… | Azure NAT Gateway |
| Network ACLs | Stateless, numbered allow and deny rules applied at the subnet boundary, evaluated in order for inbound and outbound traffic. | Network security groups and application security groups, Azure Virtual Network Manager |
| Network Load Balancer | Layer 4 (TCP, UDP, TLS) load balancer for very high throughput and low latency, with static IPs per AZ and source IP preservation. | Azure Load Balancer (Standard) |
| Route 53 private hosted zones | DNS zones that resolve only inside the VPCs you associate with them. | Azure Private DNS zones |
| Route 53 Resolver (endpoints and rules) | The VPC's built-in recursive resolver, plus inbound and outbound endpoints and forwarding rules for hybrid DNS with on-premises networks. | Azure DNS Private Resolver |
| Route 53 Resolver DNS Firewall | Filters outbound DNS queries from VPCs with allow, block, and alert rules on domain lists, including AWS-managed threat lists. | DNS resolver policy (with threat intelligence) |
| Route 53 routing policies and health checks | DNS-based traffic routing (weighted, latency, failover, geolocation, geoproximity, IP-based, multivalue) with health checks. | Azure Traffic Manager |
| Security groups | Stateful, allow-only virtual firewalls attached to network interfaces. Rules can reference other security groups instead of IP ranges. | Network security groups and application security groups |
| VPC Block Public Access | Account- or Region-wide switch that blocks internet gateway traffic to and from VPCs and subnets, with exclusions for subnets that need it. | Private subnets (default outbound access off) |
| VPC Flow Logs | Captures IP traffic metadata for VPCs, subnets, and network interfaces to CloudWatch Logs, S3, or Firehose. | Virtual network flow logs |
| VPC peering | Private, non-transitive connection between two VPCs (same or different accounts and Regions). | Virtual network peering |
| VPC Reachability Analyzer and Network Access Analyzer | Reachability Analyzer checks whether a path exists between two resources by analyzing configuration. Network Access Analyzer finds unintended network access… | Azure Network Watcher |
| VPC route tables | Routes associated with subnets, gateways (edge association), or a VPC's main table, directing traffic to gateways, endpoints, peering connections, and network… | User-defined routes (route tables) |
| VPC subnets | IP ranges within a VPC. Each subnet lives in exactly one Availability Zone (or Local Zone or Outpost), so multi-AZ designs need one subnet per AZ. | Azure Virtual Network |
| VPC Traffic Mirroring | Copies network traffic from elastic network interfaces of supported instance types to monitoring appliances for deep packet inspection. | Virtual network TAP, Azure Network Watcher |
Identity & Security(29)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon Cognito | Customer identity for apps. User pools handle sign-up, sign-in, MFA, federation (social, SAML, OIDC), and managed login. Identity pools exchange tokens for… | Microsoft Entra External ID |
| Amazon Detective | Automatically collects log data into a behavior graph and links activity to GuardDuty findings, so you can investigate and group related security findings. | Microsoft Sentinel |
| Amazon GuardDuty | Threat detection from CloudTrail, VPC Flow Logs, and DNS logs, plus protection plans for S3, EKS, runtime (EC2, ECS, EKS), malware, RDS logins, and Lambda. | Microsoft Defender for Cloud (workload protection) |
| Amazon Inspector | Continuous scanning of EC2 instances, ECR container images, and Lambda functions for software vulnerabilities and unintended network exposure. | Defender for Servers (with Defender Vulnerability Management) |
| Amazon Macie | Discovers sensitive data in S3 with machine learning and pattern matching, and monitors S3 bucket security and access controls. | Microsoft Purview (data classification and DSPM) |
| Amazon Security Lake | Centralizes security logs from AWS, SaaS, and on-premises sources into an S3-based data lake you own, normalized to OCSF in Apache Parquet. | Microsoft Sentinel data lake |
| Amazon Verified Permissions | Managed fine-grained authorization for your own applications, using policies written in the open-source Cedar language. | None |
| AWS Artifact | On-demand downloads of AWS compliance reports (SOC, ISO, PCI) and certifications, and acceptance of agreements such as the BAA. | Microsoft Service Trust Portal |
| AWS Audit Manager Maintenance | Continuously collects evidence from AWS services and maps it to control frameworks such as SOC 2, PCI DSS, and HIPAA for audit-ready reports. | Microsoft Purview Compliance Manager, Defender for Cloud CSPM (Foundational and Defender CSPM) |
| AWS Certificate Manager (ACM) | Issues, deploys, and auto-renews public and private TLS certificates for integrated services such as ELB, CloudFront, and API Gateway. | Key Vault certificates |
| AWS CloudHSM | Single-tenant HSM clusters in your VPC, FIPS 140-2 or 140-3 Level 3 validated in FIPS mode, accessed through PKCS#11, JCE, and OpenSSL libraries. | Azure Cloud HSM |
| AWS CloudTrail | Records API activity. Event history gives 90 days of management events for free, trails deliver events to S3 and CloudWatch Logs, and CloudTrail Lake stores… | Azure Monitor activity log (and Entra audit logs) |
| AWS Config | Records resource configuration history and relationships, and evaluates resources against managed or custom rules and conformance packs, with remediation. | Azure Policy, Azure Resource Graph (inventory and change analysis) |
| AWS Control Tower | Sets up and governs a multi-account landing zone on Organizations and Identity Center, with account vending and preventive, detective, and proactive controls. | Azure landing zones (Cloud Adoption Framework) |
| AWS Directory Service | AWS Managed Microsoft AD (real Windows Server AD run by AWS, with trusts to on-premises AD), AD Connector (a proxy to your AD), and Simple AD (Samba-based). | Microsoft Entra Domain Services |
| AWS IAM Identity Center | Workforce sign-in and single sign-on to AWS accounts (through permission sets) and applications, using its own directory or an external IdP such as Microsoft… | Microsoft Entra ID, Microsoft Entra Privileged Identity Management (PIM) |
| AWS Identity and Access Management (IAM) | Users, groups, roles, and JSON policies that authorize every AWS API call, with identity-based and resource-based policies, permissions boundaries, and… | Microsoft Entra ID, Azure role-based access control (Azure RBAC), Microsoft Entra workload identity federation |
| AWS Key Management Service (KMS) | Managed encryption keys (symmetric, asymmetric, and HMAC) protected by FIPS-validated HSMs and integrated with most AWS services, with key policies, grants,… | Azure Key Vault, Azure Key Vault Managed HSM |
| AWS Organizations | Groups AWS accounts into organizational units under a management account, with consolidated billing, delegated administration, and organization policies. | Azure management groups and subscriptions |
| AWS Private Certificate Authority | Managed private root and subordinate CAs for internal TLS, device, and workload certificates, with general-purpose and short-lived certificate modes. | None |
| AWS Resource Access Manager (RAM) | Shares resources such as subnets, transit gateways, Resolver rules, and license configurations across accounts or the whole organization. | Azure role-based access control (Azure RBAC) |
| AWS Secrets Manager | Stores, retrieves, and automatically rotates database credentials, API keys, OAuth tokens, and other secrets on a schedule. | Azure Key Vault |
| AWS Security Hub | Unified cloud security service that correlates findings from Security Hub CSPM, GuardDuty, Inspector, and Macie into prioritized exposures, with OCSF findings… | Defender for Cloud CSPM (Foundational and Defender CSPM) |
| AWS Security Hub CSPM | Cloud security posture management with automated control checks against standards such as AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST… | Defender for Cloud CSPM (Foundational and Defender CSPM) |
| AWS Verified Access | Zero trust access to private HTTP and TCP applications without a VPN, evaluating each request against identity and device posture policies. | Microsoft Entra Private Access |
| IAM Access Analyzer | Finds resources shared externally or internally, identifies unused roles, keys, and permissions, validates policies, runs custom policy checks, and generates… | Microsoft Entra ID Governance (access reviews) |
| IAM Roles Anywhere | Lets workloads outside AWS get temporary AWS credentials by presenting X.509 certificates from a CA you register as a trust anchor. | Microsoft Entra workload identity federation |
| IAM roles for AWS services | Roles assumed by EC2 instance profiles, Lambda execution roles, ECS task roles, and EKS Pod Identity, giving workloads temporary credentials from AWS STS with… | Managed identities for Azure resources |
| Service control policies and resource control policies | Organization guardrails. SCPs cap the maximum permissions of principals in member accounts, and RCPs cap the permissions that can be granted on supported… | Azure Policy |
AI & Machine Learning(59)
| AWS service | What it is | Azure equivalent(s) |
|---|---|---|
| Amazon Augmented AI (A2I) Maintenance | Human review loops for low-confidence ML predictions (Textract, Rekognition, custom models). | None |
| Amazon Bedrock | Fully managed API access to 100+ foundation models (Amazon Nova, Anthropic Claude, OpenAI, xAI Grok, Meta Llama, Mistral, DeepSeek, Qwen, Cohere, and more)… | Microsoft Foundry Models (incl. Azure OpenAI), Microsoft Foundry |
| Amazon Bedrock AgentCore | Modular agent platform. Harness (managed agent loop), Runtime, Memory, Gateway (MCP), Identity, Code Interpreter, Browser, Observability, Evaluations,… | Foundry observability & evaluations, Foundry Agent Service, Foundry guardrails (content filters) |
| Amazon Bedrock Agents Classic Maintenance | Configuration-based agents with action groups and knowledge bases. | Foundry Agent Service |
| Amazon Bedrock Data Automation | GenAI-based extraction of structured output from documents, images, video, and audio. | Azure Content Understanding |
| Amazon Bedrock Evaluations | Automatic, LLM-as-a-judge, and human evaluation jobs for models and RAG sources, including sources outside Bedrock. | Foundry observability & evaluations |
| Amazon Bedrock Flows & Prompt management | Visual or API-built workflows linking prompts, models, knowledge bases, Lambda, and other AWS services, with versions and aliases. | Microsoft Agent Framework, Prompt flow |
| Amazon Bedrock Guardrails | Content filters (hate, insults, sexual, violence, misconduct, prompt attack), denied topics, word filters, PII filters, contextual grounding checks, and… | Foundry guardrails (content filters), Azure AI Content Safety, Azure Language |
| Amazon Bedrock Knowledge Bases | Managed RAG. Managed Knowledge Base (AWS runs ingestion, storage, and agentic retrieval) or customer-managed (bring your own vector store, such as OpenSearch… | Foundry IQ (knowledge bases), Azure AI Search |
| Amazon Bedrock Marketplace | Discover and deploy additional third-party and specialized models onto managed endpoints, used through Bedrock APIs. | Microsoft Foundry Models (incl. Azure OpenAI), Azure Machine Learning |
| Amazon Bedrock model customization | Supervised fine-tuning, reinforcement fine-tuning (reward functions in Lambda), and distillation for supported Bedrock models. | Foundry fine-tuning |
| Amazon Bedrock Provisioned Throughput & cross-Region inference | Reserved model capacity, plus Global and Geo cross-Region inference profiles that route requests across Regions for throughput. | Foundry deployment types (Standard, Provisioned, Batch) |
| Amazon Comprehend | NLP. Entities, key phrases, sentiment and targeted sentiment, language detection, PII, syntax, toxicity, and custom classification/entity recognition. | Azure AI Content Safety, Azure Language, Foundry guardrails (content filters) |
| Amazon Comprehend Medical | HIPAA-eligible extraction of medical entities, relationships, PHI, and ontology linking (ICD-10-CM, RxNorm, SNOMED CT) from English clinical text. | Text Analytics for health |
| Amazon EC2 accelerated computing (NVIDIA GPU) | GPU instances. Training families include P5/P5e/P5en (H100/H200), P6-B200, P6-B300, and P6e-GB200 UltraServers. Inference and graphics families include… | Azure ND-series GPU VMs |
| Amazon Forecast Maintenance | Managed time-series forecasting. | Azure ML automated ML (AutoML) |
| Amazon Fraud Detector Maintenance | Managed fraud-detection models for online payments, account sign-ups, and more. | Azure Machine Learning |
| Amazon Kendra Maintenance | ML-powered enterprise search with connectors and relevance tuning. | Azure AI Search |
| Amazon Lex V2 | Voice and text chatbots with NLU and ASR, LLM-assisted NLU, conditional branching, Lambda fulfillment, and Amazon Connect integration. | Microsoft Copilot Studio, Azure AI Bot Service, Conversational language understanding (CLU) |
| Amazon Lookout for Equipment Retired | Sensor-based anomaly detection for industrial equipment. | Azure AI Anomaly Detector |
| Amazon Lookout for Metrics Retired | Anomaly detection on business metrics. | Azure AI Metrics Advisor |
| Amazon Lookout for Vision Retired | Visual anomaly and defect detection for manufacturing. | None |
| Amazon Monitron Maintenance | End-to-end condition monitoring with AWS sensors, gateways, and an app. | Azure AI Anomaly Detector |
| Amazon Nova | Amazon's first-party foundation models. Understanding (Nova Micro/Lite/Pro, Nova 2 Lite), creative (Nova Canvas image, Nova Reel video), speech-to-speech… | Microsoft models in Foundry (MAI, Phi, Model Router), Microsoft Foundry Models (incl. Azure OpenAI), Azure Speech, Foundry Agent Service |
| Amazon Personalize | Managed recommendation engine. Recommenders, custom recipes, real-time and batch recommendations, and user segmentation. | Azure AI Personalizer, Azure Machine Learning |
| Amazon Polly | Text-to-speech with generative, long-form, neural, and standard voices, SSML, and lexicons. | Azure Speech |
| Amazon Q Business Maintenance | GenAI assistant over enterprise data with connectors and plugins. | Microsoft 365 Copilot, Microsoft Copilot Studio |
| Amazon Q Developer Sunset | AI assistant for AWS and software development. IDE chat and completions, plus help in the AWS console. | GitHub Copilot, Azure Copilot |
| Amazon Quick | AI assistant for work. Quick Sight (BI), Quick Flows (workflow automation), Quick Automate (agentic process automation), Quick Index (grounding on company… | Microsoft 365 Copilot, Microsoft Copilot Studio |
| Amazon Rekognition | Prebuilt image and video analysis. Labels, text, moderation, face detection, comparison and search, celebrity recognition, and Face Liveness. | Azure Vision – Image Analysis, Microsoft Foundry Models (incl. Azure OpenAI), Azure Content Understanding, Azure Face, Azure AI Video Indexer, Azure AI Content Safety |
| Amazon Rekognition Custom Labels | Train custom image classification and object detection models from labeled images. | Azure Custom Vision, Azure ML automated ML (AutoML) |
| Amazon SageMaker AI | Fully managed service to build, train, and deploy ML models. | Azure Machine Learning |
| Amazon SageMaker Canvas | No-code ML for analysts. Tabular, time series, text, and image predictions, plus access to foundation models. | Azure ML automated ML (AutoML), Azure ML Designer |
| Amazon SageMaker Clarify Maintenance | Bias detection and explainability (SHAP) for ML models. | Responsible AI dashboard (Azure ML) |
| Amazon SageMaker Feature Store | Online (low-latency latest values) and offline (historical) feature stores, organized as feature groups. | Azure ML managed feature store |
| Amazon SageMaker Ground Truth Maintenance | Human and ML-assisted data labeling with private, vendor, or (formerly) Mechanical Turk workforces. | Azure ML data labeling |
| Amazon SageMaker HyperPod | Persistent, resilient clusters for large-scale foundation-model training and inference, orchestrated with Slurm or Amazon EKS. Supports Trainium and NVIDIA… | Azure ML compute clusters & serverless compute, Azure Kubernetes Service (AKS), Azure ML on Kubernetes (AKS / Arc) |
| Amazon SageMaker JumpStart | Hub of pretrained and open-weight models plus solution templates, deployed and fine-tuned on SageMaker infrastructure. Supports private and curated hubs. | Microsoft Foundry Models (incl. Azure OpenAI), Azure Machine Learning |
| Amazon SageMaker Model Monitor Maintenance | Data quality, model quality, bias, and feature-attribution drift monitoring for endpoints. | Azure ML model monitoring |
| Amazon SageMaker Pipelines | Serverless ML workflow orchestration with a visual editor, SDK, and lineage tracking. | Azure Machine Learning pipelines, Azure ML Designer |
| Amazon SageMaker Studio | Web IDE suite for ML. JupyterLab, Code Editor (Code-OSS), RStudio, and Studio Classic. | Azure Machine Learning studio & compute instances |
| Amazon SageMaker Unified Studio | Single development experience across AWS data, analytics, and AI/ML services, organized as domains and projects. Part of the "next generation of Amazon… | Microsoft Fabric Data Science, Azure Machine Learning |
| Amazon Textract | OCR plus forms, tables, Queries, expense (invoices/receipts), ID document, and lending document analysis. | Azure Document Intelligence |
| Amazon Transcribe | Speech-to-text, streaming and batch, with custom vocabularies and language models, speaker partitioning, PII redaction, and content filtering. | Azure Speech |
| Amazon Transcribe Call Analytics | Contact-center transcription with sentiment, issue detection, categories, and GenAI call summaries. | Azure Speech, Azure Language, Azure Content Understanding |
| Amazon Translate | Neural machine translation, real-time and batch, with custom terminology and Active Custom Translation (parallel data). | Azure Translator |
| AWS Deep Learning AMIs | Prebuilt EC2 machine images with GPU drivers and deep learning frameworks. | Data Science Virtual Machines |
| AWS HealthLake | HIPAA-eligible FHIR R4 data store with integrated medical NLP, an agent that converts C-CDA/CSV to FHIR, and analytics integration. | Azure Health Data Services |
| AWS HealthScribe | HIPAA-eligible speech recognition plus generative AI that turns patient-clinician conversations into transcripts and draft clinical notes. | Azure Speech, Text Analytics for health, Microsoft models in Foundry (MAI, Phi, Model Router) |
| AWS Inferentia (Inf2) | AWS-designed inference accelerator chips, available as EC2 Inf1 and Inf2 instances through the Neuron SDK. | Microsoft Maia 200 |
| AWS Trainium (Trn1, Trn2, Trn3) | AWS-designed AI training and inference chips, programmed through the AWS Neuron SDK. Trn3 UltraServers (Trainium3, 3nm) became generally available Dec 2, 2025. | Microsoft Maia 200 |
| Kiro | AWS's agentic development environment (IDE + CLI) for spec-driven development, with specs, hooks, steering files, custom subagents, Powers, and MCP. The… | GitHub Copilot |
| Managed MLflow on SageMaker AI | Fully managed MLflow for experiment tracking, a model registry, and GenAI tracing and evaluation. | MLflow in Azure Machine Learning |
| SageMaker AI inference (endpoints) | Real-time, serverless, asynchronous, and batch-transform inference options. | Azure ML online & batch endpoints |
| SageMaker AI training jobs | Managed, ephemeral training clusters with built-in algorithms or your own containers and frameworks. Billed per instance-second. | Azure ML compute clusters & serverless compute |
| SageMaker Autopilot | AutoML. Data preprocessing, algorithm selection, tuning, and deployment. | Azure ML automated ML (AutoML) |
| SageMaker Debugger & Profiler Maintenance | Training-job tensor debugging rules and system/framework profiling. | None |
| SageMaker Model Registry | Catalog of model versions with metadata, approval status, lineage, and Model Cards. | Azure ML model registry & registries |
| Strands Agents SDK | AWS open-source, model-driven SDK for building agents in code. Deployable on AgentCore Runtime or anywhere. | Microsoft Agent Framework |