Amazon Web Services → Microsoft Azure
Azure equivalent of Gateway VPC endpoints
Gateway VPC endpoints (for S3 and DynamoDB) map most closely to Azure virtual network service endpoints.
About Gateway VPC endpoints
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Free route-table targets that give a VPC private access to Amazon S3 and DynamoDB without an internet or NAT gateway. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Free backbone access to storage services | Virtual network service endpoints | Partial match |
Private access to services(1)
Free backbone access to storage services Partial match
Gateway VPC endpoints (for S3 and DynamoDB) map most closely to Azure virtual network service endpoints. Both are free, use route or subnet configuration rather than an IP in your network, and let the service lock access to your network.
- Mechanism. A gateway endpoint adds a prefix-list route to your route tables, and bucket policies can require the endpoint. A service endpoint tags traffic with the subnet identity, and the service's firewall allows that subnet.
- Coverage. Gateway endpoints cover only S3 and DynamoDB. Service endpoints cover more Azure services (such as Storage, SQL, Key Vault, and Cosmos DB). Standard service endpoints add network identifiers and network security perimeter integration for some services.
- On-premises. Neither works from on-premises networks. Use interface endpoints or private endpoints for that.