Amazon Web Services → Microsoft Azure
Azure equivalent of Security groups
Security groups map to Azure network security groups (NSGs), with application security groups (ASGs) standing in for rules that reference other security groups.
About Security groups
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Stateful, allow-only virtual firewalls attached to network interfaces. Rules can reference other security groups instead of IP ranges. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| Stateful instance-level firewall rules | Network security groups and application security groups | Direct match |
Network security & firewalls(1)
Stateful instance-level firewall rules Direct match
Security groups map to Azure network security groups (NSGs), with application security groups (ASGs) standing in for rules that reference other security groups.
- Rule types. Security groups have allow rules only (everything else is denied). NSGs have prioritized allow and deny rules, plus default rules that allow traffic within the virtual network and from the load balancer.
- Attachment. Security groups attach to network interfaces. NSGs attach to subnets, NICs, or both, and both levels are evaluated.
- References. Security group rules can reference other security groups. NSG rules reference ASGs or service tags (such as Storage or AzureLoadBalancer).