Microsoft Azure services and their AWS equivalents
232 Azure services mapped to AWS across 7 categories, including retired and maintenance-mode services.
Compute(28)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| Azure Advisor | Free recommendations for cost (including VM right-sizing and shutdown), reliability, security, performance, and operational excellence. | AWS Compute Optimizer |
| Azure App Service | A managed PaaS for web apps, APIs, and containers (Windows or Linux). It includes deployment slots, autoscale, built-in auth, managed certificates, and App… | AWS Elastic Beanstalk, Amazon ECS Express Mode, AWS App Runner, AWS Lambda Web Functions |
| Azure Bastion | A managed jump service for RDP and SSH to VMs over TLS from the portal or a native client, with no public IPs on the VMs. Available SKUs are Developer (free,… | AWS Systems Manager Session Manager, EC2 Instance Connect Endpoint |
| Azure Batch | Free job scheduling and pool management for large parallel and HPC jobs on VM pools (including Spot), with tasks, job schedules, and autoscale formulas. You… | AWS Batch |
| Azure Cobalt (Arm-based VMs) | Microsoft-designed Arm64 CPUs. Cobalt 100 runs at 3.4 GHz with one full physical core per vCPU. "p" series also include older Ampere Altra-based sizes. | AWS Graviton (Arm-based EC2) |
| Azure Compute Gallery (and legacy managed images) | Versioned image definitions with replication across regions, sharing through RBAC, direct shared galleries, or community galleries, plus VM application… | Amazon Machine Images (AMIs) |
| Azure confidential computing (confidential VMs & enclaves) | Confidential VMs use AMD SEV-SNP (DCasv5/v6, ECasv5/v6) or Intel TDX (DCesv6, ECesv6), plus H100 confidential GPUs. Azure Attestation and confidential OS disk… | AWS Nitro Enclaves, AMD SEV-SNP on Amazon EC2 |
| Azure CycleCloud & CycleCloud Workspace for Slurm | Orchestrates HPC clusters with standard schedulers (Slurm, PBS Pro, LSF, Grid Engine, HTCondor). Workspace for Slurm is a Marketplace template that deploys a… | AWS ParallelCluster, AWS Parallel Computing Service (PCS) |
| Azure Dedicated Host | Single-tenant physical servers grouped into host groups, with control over maintenance and placement. Billed per host. VMs on the host show a price of zero. | Amazon EC2 bare metal instances, Amazon EC2 Dedicated Hosts & Dedicated Instances |
| Azure Extended Zones | Small-footprint Azure extensions in metro areas or specific jurisdictions for low latency and data residency. VMs, scale sets, AKS, managed disks, and core… | AWS Local Zones, AWS Wavelength |
| Azure Hybrid Benefit | Apply existing Windows Server or SQL Server licenses with active Software Assurance (or qualifying subscriptions) to Azure, paying only base compute rates.… | AWS License Manager |
| Azure Local (formerly Azure Stack HCI) | Microsoft's distributed infrastructure on customer-owned validated hardware, managed through Azure Arc, running VMs, AKS, and Azure Virtual Desktop. Connected… | AWS Outposts (racks & servers) |
| Azure on-demand capacity reservation | Reserve VM capacity in a region or availability zone for any duration, with no term commitment and an SLA. Billed at pay-as-you-go rates. It can be combined… | EC2 On-Demand Capacity Reservations |
| Azure Reservations (Reserved VM Instances) | A 1- or 3-year commitment to a VM size family in a region, with instance size flexibility. Discounts apply automatically to matching usage. | Amazon EC2 Reserved Instances |
| Azure savings plan for compute | A 1- or 3-year fixed $/hour spend commitment that applies automatically across eligible compute services and regions. A separate savings plan for databases… | Savings Plans (Compute & EC2 Instance) |
| Azure Spot Virtual Machines | Unused Azure capacity at a discount, evicted when Azure needs capacity or the price exceeds your max price. The eviction policy is Deallocate (the default) or… | Amazon EC2 Spot Instances |
| Azure Update Manager | Assess and install OS updates on Azure VMs and Arc-enabled servers, with maintenance configurations, periodic assessment, and hotpatching. | AWS Systems Manager Patch Manager |
| Azure Virtual Desktop | Desktop and app virtualization on session hosts you run in Azure (or on Azure Local). Windows 11/10 Enterprise multi-session is exclusive to it. Supports… | Amazon WorkSpaces (Personal & Pools), Amazon WorkSpaces Applications (formerly AppStream 2.0) |
| Azure Virtual Machine Scale Sets | Groups of VMs managed as one, with autoscale (metrics, schedule, or predictive), zone/fault-domain spreading, instance mix, Spot priority mix, standby pools,… | Amazon EC2 Auto Scaling |
| Azure Virtual Machines | On-demand Windows and Linux VMs with managed disks. Gen2 VMs default to Trusted Launch. Pay as you go, Spot, reservations, savings plan, and Azure Hybrid… | Amazon EC2 |
| Azure VM hibernation | Suspend-to-disk for Azure VMs. Memory is written to the OS disk and the VM is deallocated, so you pay only for disks and IPs while it's hibernated. Supported… | Amazon EC2 hibernation |
| Azure VM Image Builder | A managed service (built on HashiCorp Packer) that customizes marketplace or custom images and distributes them to Compute Gallery, managed images, or VHDs. | EC2 Image Builder |
| Azure VM sizes (series) | VM series grouped by type (general purpose B/D, compute F, memory E/M, storage L, GPU N, HPC H). Names encode the CPU vendor (a = AMD, p = Arm) and features… | Amazon EC2 instance types |
| Azure VMware Solution | Microsoft-operated VMware vSphere, vSAN, and NSX private clouds on dedicated Azure bare-metal hosts (AV36/AV36P/AV48/AV52/AV64, with a three-node minimum).… | Amazon EC2 bare metal instances, Amazon Elastic VMware Service (EVS) |
| InfiniBand on Azure HPC and GPU VMs | RDMA-capable InfiniBand on H-series (HB, HX) and ND-series VMs for MPI and NCCL. It works within a scale set or availability set. | Elastic Fabric Adapter (EFA) |
| Proximity placement groups & availability sets | A proximity placement group co-locates VMs, scale sets, and availability sets in one datacenter for low latency. Availability sets and scale-set fault domains… | EC2 placement groups |
| Trusted Launch for Azure VMs | Secure Boot, vTPM 2.0, and boot integrity monitoring for Gen2 VMs and scale sets. It's the default for new Gen2 VMs, and existing Gen1 VMs can be upgraded. | NitroTPM & UEFI Secure Boot |
| Windows 365 (Cloud PC) | Per-user Cloud PCs licensed per user per month and managed with Microsoft Intune. Microsoft runs the infrastructure. | Amazon WorkSpaces (Personal & Pools) |
Containers & Serverless(24)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| AKS Automatic | An AKS SKU where Azure also manages nodes (node autoprovisioning, Karpenter-based), system components, networking, security defaults (deployment safeguards,… | Amazon EKS Auto Mode |
| AKS Hybrid and Edge (AKS enabled by Azure Arc) | AKS on infrastructure you own (Azure Local, Windows Server, edge sites, other clouds) managed through the Azure control plane with Arc, plus Azure Policy,… | Amazon EKS Hybrid Nodes & EKS Anywhere |
| AKS Kubernetes version support & Long Term Support (LTS) | About 12 months of community support per minor version. Premium-tier LTS adds a second year (roughly 24 months in total). From June 1, 2027, clusters left on… | Amazon EKS Kubernetes version support (standard & extended) |
| Azure API Management | API gateway, developer portal, and management plane (policies, products, subscriptions, versioning) for REST, SOAP, GraphQL, WebSocket, and gRPC APIs.… | Amazon API Gateway, AWS AppSync, Amazon VPC Lattice |
| Azure Container Apps | Serverless container platform built on Kubernetes (KEDA, Envoy, Dapr) without exposing the Kubernetes API. Includes apps, jobs, revisions and traffic… | Amazon ECS, AWS Fargate, Amazon ECS Express Mode, AWS App Runner, AWS Lambda Web Functions |
| Azure Container Apps dynamic sessions | Pools of Hyper-V-isolated sandboxes, either built-in code-interpreter sessions or your own container image, for running untrusted or AI-generated code with… | AWS Lambda MicroVMs |
| Azure Container Instances | Run Linux or Windows container groups on demand with per-second billing, no orchestrator, and options for confidential, Spot, NGroups (multi-instance),… | AWS Fargate |
| Azure Container Registry | Private OCI registry in Basic, Standard, or Premium tiers, with geo-replication, private endpoints, ACR Tasks (builds), artifact cache, Entra ID auth, and… | Amazon ECR |
| Azure Event Grid | Managed pub/sub event routing. System topics for Azure events, custom topics and namespaces, CloudEvents, push and pull delivery, and an MQTT broker (v3.1.1… | Amazon EventBridge (event buses & Pipes), Amazon SNS |
| Azure Functions | Event-driven functions with triggers and input/output bindings. Hosting plans are Flex Consumption, Premium, Dedicated (App Service), Container Apps, and… | AWS Lambda (Event Functions), Lambda function URLs, Amazon EventBridge Scheduler |
| Azure Functions Flex Consumption plan | Linux serverless plan with per-instance concurrency, selectable instance memory (512 MB and up), VNet integration, scale-out up to 1,000 instances, and… | Lambda provisioned concurrency, Lambda SnapStart |
| Azure Functions Premium & Dedicated plans | Premium (Elastic Premium) has always-ready and prewarmed instances, VNet integration, and no cold starts on warm instances. Dedicated runs functions on App… | Lambda provisioned concurrency, Lambda SnapStart, Lambda Managed Instances |
| Azure Kubernetes Service (AKS) | Managed Kubernetes. Azure runs the control plane (Free, Standard, or Premium tier), and you run node pools (VM scale sets), including GPU pools for AI… | Amazon EKS, Amazon SageMaker HyperPod |
| Azure Logic Apps | Low-code workflow and integration platform with 1,400+ connectors. Consumption (multitenant, pay per execution) or Standard (single-tenant, hosting plan,… | AWS Step Functions, Amazon EventBridge Scheduler |
| Azure Queue Storage | Simple, low-cost queues in a storage account. Holds millions of messages (up to 64 KB each), accessed over HTTP/HTTPS. | Amazon SQS |
| Azure Red Hat OpenShift | Fully managed OpenShift jointly engineered, operated, and supported by Red Hat and Microsoft, billed on your Azure bill. Comes in standard and hosted control… | Red Hat OpenShift Service on AWS (ROSA) |
| Azure Service Bus | Enterprise message broker with queues and topics/subscriptions. Supports sessions (FIFO), duplicate detection, transactions, dead-lettering, scheduled… | Amazon SQS, Amazon SNS, Amazon MQ |
| Azure Static Web Apps | Static and hybrid web hosting (with Next.js support) on global distribution. Includes GitHub and Azure DevOps CI/CD, preview environments, built-in auth, and… | AWS Amplify Hosting |
| Azure Web PubSub | Managed real-time messaging over WebSockets (and Socket.IO) with publish/subscribe to groups and server event handlers. | AWS AppSync |
| Durable Functions & Durable Task Scheduler | Code-first stateful orchestrations, entities, and timers for Azure Functions (C#, JavaScript, Python, Java, PowerShell). Durable Task Scheduler is a managed… | Lambda durable functions |
| GitOps for AKS (Flux v2 and Argo CD extensions) | Cluster extensions that install and manage Flux v2 or Argo CD on AKS and Arc-enabled Kubernetes, configured through Azure Resource Manager and Azure Policy. | Amazon EKS Capabilities (Argo CD, ACK, kro) |
| Istio-based service mesh add-on for AKS | Microsoft-managed Istio control plane (revision-based upgrades) with optional ingress and egress gateways. Supported by Azure. | Amazon ECS Service Connect, AWS App Mesh |
| Microsoft Entra Workload ID for AKS | Federates Kubernetes service account tokens (OIDC issuer) with Microsoft Entra managed identities or app registrations, so pods get Entra tokens without… | EKS Pod Identity (and IRSA) |
| Open Service Mesh (OSM) add-on for AKS Deprecated | Envoy-based, SMI-configured service mesh add-on. | Amazon ECS Service Connect, AWS App Mesh |
Storage(36)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| AzCopy | Free command-line tool for copying data to, from, and between Blob Storage and Azure Files, including server-side copy directly from Amazon S3 and Google… | AWS DataSync |
| Azure AI Search | Search and retrieval engine. Full-text, vector, and hybrid search, semantic ranker, integrated vectorization and AI enrichment (indexers and skillsets), and… | Amazon S3 Vectors, Amazon Bedrock Knowledge Bases, Amazon Kendra |
| Azure Backup | Policy-based backup for Azure VMs, disks, Blob Storage, Azure Files, AKS, SQL Server and SAP HANA/ASE in VMs, PostgreSQL and MySQL flexible servers, and… | AWS Backup |
| Azure Backup immutable vaults | Vault setting that blocks operations that could delete recovery points. It can be locked to make it irreversible, with backups moved onto WORM storage where… | AWS Backup logically air-gapped vault |
| Azure Blob Storage | Object storage in containers inside a storage account. Block, append, and page blobs, with LRS, ZRS, GRS, GZRS, and read-access geo options, versioning, soft… | Amazon S3 |
| Azure Container Storage and AKS CSI drivers | AKS includes CSI drivers for Azure Disks, Azure Files, and Blob Storage (BlobFuse or NFS). Azure Container Storage v2 is an open-source volume orchestrator… | Amazon EKS storage CSI drivers (EBS, EFS, FSx, Mountpoint for S3) |
| Azure Data Box | Microsoft-shipped rugged storage devices for offline bulk import and export, with up to 100 Gbps interfaces on next-gen devices. | AWS Snowball Edge (Snow Family), AWS Data Transfer Terminal |
| Azure Data Box Gateway | A virtual appliance (Hyper-V or VMware) that exposes NFS and SMB shares on premises, caches recent data locally, and uploads it to Blob Storage or Azure Files. | AWS Storage Gateway – Amazon S3 File Gateway |
| Azure Data Lake Storage (hierarchical namespace) | Not a separate service. It's Blob Storage with the hierarchical namespace turned on, adding real directories, atomic renames, POSIX-style ACLs, and the Hadoop… | Amazon S3 |
| Azure Elastic SAN | A managed SAN that pools capacity and performance across volume groups and volumes, served over iSCSI to VMs, AKS (through Azure Container Storage), and Azure… | Amazon FSx for NetApp ONTAP |
| Azure File Sync | Agent on Windows Server that syncs local shares to an Azure file share, with cloud tiering (only hot files cached locally) and multi-site sync through the… | AWS Storage Gateway – Amazon S3 File Gateway, AWS Storage Gateway – Amazon FSx File Gateway |
| Azure Files | Fully managed SMB (2.1 to 3.1.1) and NFS 4.1 file shares, either classic shares in a storage account or top-level Microsoft.FileShares shares (NFS on SSD… | Amazon EFS, Amazon FSx for Windows File Server |
| Azure HPC Cache Retired | An NFS caching service in front of on-premises NAS or Blob containers for read-heavy HPC jobs. | Amazon File Cache |
| Azure managed disks | Block storage for VMs. Ultra Disk (up to 64 TiB, 400,000 IOPS), Premium SSD v2 (up to 64 TiB, 80,000 IOPS, 3,000 IOPS and 125 MB/s included), Premium SSD,… | Amazon EBS |
| Azure Managed Lustre | Managed Lustre parallel file system for HPC and AI, with Blob Storage integration (Lustre HSM import and export) and an AKS CSI driver. | Amazon FSx for Lustre |
| Azure NetApp Files | First-party NetApp ONTAP-based file service. NFSv3, NFSv4.1, SMB, and dual-protocol volumes, an S3-compatible object REST API, five service levels (including… | Amazon FSx for NetApp ONTAP |
| Azure shared disks | Attach one Ultra Disk, Premium SSD v2, Premium SSD, or Standard SSD to multiple VMs at once, coordinated through SCSI persistent reservations or NVMe… | Amazon EBS Multi-Attach |
| Azure Site Recovery | Continuous replication, failover, and failback for Azure VMs between regions (Extended Zones support is in preview), and for on-premises VMware and Hyper-V… | AWS Elastic Disaster Recovery (DRS) |
| Azure Storage access control (Entra RBAC, SAS, network rules) | Data access through Microsoft Entra ID with Azure RBAC data roles (and ABAC conditions), shared access signatures for time-limited delegated access, account… | Amazon S3 access control (IAM, bucket policies, presigned URLs) |
| Azure Storage Actions | Serverless storage tasks that apply conditions and operations (tier, tag, set immutability, delete, and more) to millions of blobs across multiple storage… | Amazon S3 Batch Operations |
| Azure Storage Mover | Managed migration service for NFS and SMB shares (through a migration agent) and AWS S3 buckets into Blob Storage or Azure Files. FSx SMB and Google Cloud… | AWS DataSync |
| Azure Storage redundancy (LRS, ZRS, GRS, GZRS) | Per-account replication setting. LRS keeps three copies in one datacenter, ZRS spreads them synchronously across three or more zones, and GRS/GZRS add… | Amazon S3 Replication (CRR, SRR, Batch Replication) |
| Blob inventory and change feed | Blob inventory produces scheduled CSV or Parquet reports of blobs, versions, snapshots, and containers. Change feed is an ordered, durable log of create,… | Amazon S3 Inventory and S3 Metadata |
| Blob Storage access tiers (hot, cool, cold, archive) | Online hot, cool (30-day minimum), and cold (90-day minimum) tiers, plus the offline archive tier (180-day minimum, rehydration up to 15 hours). Tiers apply… | Amazon S3 storage classes, Amazon Glacier (original vault service) |
| Blob Storage lifecycle management | Account-level JSON rules that tier or delete current versions, previous versions, and snapshots based on creation, modification, or last-access time, filtered… | Amazon S3 Lifecycle |
| Blob Storage object replication | Asynchronous, rule-based copying of block blobs between containers in two accounts (any regions, optionally across tenants), with optional priority… | Amazon S3 Replication (CRR, SRR, Batch Replication) |
| Blob Storage smart tier | A default account access tier that moves block blobs from hot to cool after 30 days without access, then to cold after 60 more days, and back to hot on… | Amazon S3 Intelligent-Tiering |
| BlobFuse2 | Open-source libfuse3 client that mounts Blob containers as a Linux file system, with file, metadata, and attribute caching and preload. Not fully POSIX (for… | Amazon S3 Files, Mountpoint for Amazon S3 |
| Immutable storage for Blob Storage (WORM) | Time-based retention policies (unlocked or locked) and legal holds, set at the container level or, with version-level WORM, on the account, container, or… | Amazon S3 Object Lock |
| Managed disk snapshots (incremental) | Incremental snapshots store only changes since the last one, are billed on used size, and are kept on Standard HDD storage regardless of disk type. They can… | Amazon EBS snapshots |
| Microsoft Fabric OneLake | Fabric's tenant-wide data lake (built on ADLS) that stores tables in Delta Lake format and virtualizes metadata so the same tables can be read as Apache… | Amazon S3 Tables |
| NFS 3.0 protocol support for Blob Storage | Mount a Blob container over NFS 3.0 from Linux clients in Azure or on premises (over a private network). Requires the hierarchical namespace and suits large,… | Amazon S3 Files, Mountpoint for Amazon S3 |
| Premium block blob storage accounts | SSD-backed block blob accounts with low, consistent latency and lower per-transaction prices (higher storage price). LRS or ZRS. They can't use hot, cool,… | Amazon S3 Express One Zone |
| SFTP support for Blob Storage | A per-account SFTP endpoint on port 22 for accounts with the hierarchical namespace, using local users (password or SSH key, up to 50,000 per account) or… | AWS Transfer Family |
| StorSimple Retired | Hybrid storage arrays and virtual arrays that tiered on-premises volumes and shares to Azure Storage. | AWS Storage Gateway – Volume Gateway |
| VM temporary disks, local NVMe, and ephemeral OS disks | Many VM sizes include a temporary disk or local NVMe drives at no extra charge, whose data isn't preserved across deallocation or host moves. Ephemeral OS… | Amazon EC2 instance store |
Databases(32)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| Azure Cosmos DB change feed | Persistent, ordered (per partition key) log of changes, read with the change feed processor, Azure Functions triggers, or Spark. Latest-version mode by… | Amazon DynamoDB Streams |
| Azure Cosmos DB for Apache Cassandra | Cassandra Query Language-compatible API on Cosmos DB, with RU-based throughput and Cosmos DB global distribution. | Amazon Keyspaces (for Apache Cassandra) |
| Azure Cosmos DB for Apache Gremlin | Property-graph database using the Gremlin (Apache TinkerPop) query language on Cosmos DB, with RU throughput and global distribution. | Amazon Neptune (Database and Analytics) |
| Azure Cosmos DB for NoSQL | Globally distributed NoSQL document database with request-unit (RU) throughput (provisioned, autoscale, or serverless), automatic indexing, five consistency… | Amazon DynamoDB |
| Azure Cosmos DB for PostgreSQL Deprecated | Distributed PostgreSQL built on Citus. | Amazon Aurora PostgreSQL Limitless Database |
| Azure Cosmos DB global distribution and multi-region writes | Add or remove regions at any time, with single-region or multi-region writes, automatic or manual failover, and conflict resolution (last writer wins or… | Amazon DynamoDB global tables |
| Azure Cosmos DB integrated cache (dedicated gateway) | Item and query cache built into a dedicated gateway that you size by node count and node size, for the API for NoSQL. | Amazon DynamoDB Accelerator (DAX) |
| Azure Data Explorer | Managed analytics engine for log, telemetry, and time-series data queried with Kusto Query Language (KQL), with built-in time-series, anomaly-detection, and… | Amazon Timestream for LiveAnalytics |
| Azure Database for MariaDB Retired | Former managed MariaDB service, built on the older single-server platform. | Amazon RDS for MariaDB |
| Azure Database for MySQL (flexible server) | Managed MySQL Community Edition (5.7, 8.0, and 8.4) in Burstable, General Purpose, and Business Critical tiers, with same-zone or zone-redundant HA, read… | Amazon RDS for MySQL, Amazon Aurora MySQL-Compatible Edition |
| Azure Database for PostgreSQL (flexible server) | Managed community PostgreSQL in Burstable, General Purpose, and Memory Optimized tiers, with same-zone or zone-redundant HA (synchronous warm standby), read… | Amazon RDS for PostgreSQL, Amazon Aurora PostgreSQL-Compatible Edition |
| Azure Database for PostgreSQL elastic clusters | Managed Citus on flexible server nodes, for horizontal sharding (row-based or schema-based) across a shared-nothing cluster. | Amazon Aurora PostgreSQL Limitless Database |
| Azure Database Migration Service | Managed online and offline migrations to Azure SQL Database, SQL Managed Instance, and SQL Server on Azure VMs, and migrations to Azure Database for MySQL… | AWS Database Migration Service (DMS) |
| Azure DocumentDB (with MongoDB compatibility) | vCore-based MongoDB-compatible database built on the open-source, MIT-licensed DocumentDB engine (PostgreSQL-based, not MongoDB code). Microsoft cites 99.03%… | Amazon DocumentDB (with MongoDB compatibility) |
| Azure HorizonDB Preview | Cloud-native PostgreSQL service with disaggregated compute and storage and a database-as-a-log design. Storage is zone-resilient by default and grows… | Amazon Aurora PostgreSQL-Compatible Edition |
| Azure Managed Instance for Apache Cassandra | Managed open-source Apache Cassandra datacenters, deployed into your VNet on VM scale sets, that can join existing on-premises or other-cloud Cassandra… | Amazon Keyspaces (for Apache Cassandra) |
| Azure Managed Redis | Managed Redis built on Redis Enterprise, in Memory Optimized, Balanced, Compute Optimized, and Flash Optimized tiers, with active geo-replication and Redis… | Amazon ElastiCache |
| Azure SQL active geo-replication and failover groups | Asynchronous replication of databases to other regions, with failover groups that give stable read-write and read-only listener endpoints across regions. | Amazon Aurora Global Database |
| Azure SQL Database | Managed database-scoped SQL Server engine (always the latest version) in vCore (General Purpose, Business Critical, Hyperscale up to 128 TB) or DTU models,… | Amazon RDS for SQL Server |
| Azure SQL Database serverless | A compute tier for single databases that autoscales between minimum and maximum vCores, bills compute per second, and can auto-pause after a delay you set… | Amazon Aurora Serverless v2 |
| Azure SQL Managed Instance | PaaS SQL Server instance with near-100% compatibility with SQL Server Enterprise Edition (SQL Agent, cross-database queries, CLR, and more), native VNet… | Amazon RDS for SQL Server |
| Azure Table Storage and Azure Cosmos DB for Table | Table Storage is a simple, low-cost key-attribute store in a storage account. Cosmos DB for Table uses the same API with Cosmos DB throughput, global… | Amazon DynamoDB |
| Built-in PgBouncer (Azure Database for PostgreSQL) | Optional connection pooler that runs on the same VM as the flexible server (General Purpose and Memory Optimized tiers). | Amazon RDS Proxy |
| In-place major version upgrade (PostgreSQL) | Upgrades a flexible server to a newer supported major version in place, keeping its name and settings, with some downtime. | Amazon RDS Blue/Green Deployments |
| Ledger in Azure SQL Database and SQL Server | Tamper-evident updatable and append-only ledger tables. Changes are SHA-256 hashed into a Merkle-tree chain, with database digests stored in immutable storage… | Amazon Quantum Ledger Database (QLDB) |
| Mirroring in Microsoft Fabric | Managed, near-real-time replication of databases (Azure SQL, Cosmos DB, PostgreSQL, Snowflake, and others) into OneLake as Delta tables, with a SQL analytics… | Amazon RDS and Aurora zero-ETL integrations |
| Oracle AI Database@Azure | Oracle Exadata Database Service (dedicated or Exascale), Autonomous AI Database, and Base Database Service, run by OCI inside Azure data centers. Bought… | Amazon RDS for Oracle, Oracle Database@AWS |
| Read replicas (PostgreSQL, MySQL) | Asynchronous read-only replicas in the same or another region, which can be promoted, with virtual endpoints for PostgreSQL. | Amazon RDS read replicas, Amazon Aurora Global Database |
| SQL database in Microsoft Fabric | A transactional database in Fabric built on the Azure SQL Database engine. It's billed through Fabric capacity and automatically mirrored to OneLake for… | Amazon Aurora Serverless v2 |
| SQL Managed Instance enabled by Azure Arc | SQL Managed Instance running on Kubernetes on your own infrastructure, managed through Azure Arc. | Amazon RDS on AWS Outposts |
| SQL Server on Azure Virtual Machines | SQL Server on Windows or Linux VMs with full OS and instance control. The free SQL IaaS Agent extension adds automated backup, patching, and license… | Amazon RDS Custom (Oracle and SQL Server) |
| Zone-redundant high availability (PostgreSQL, MySQL, Azure SQL) | Synchronous standby (PostgreSQL, MySQL) or multiple replicas (SQL Database Business Critical and Hyperscale), placed in another zone, with automatic failover. | Amazon RDS Multi-AZ deployments |
Networking & Content Delivery(36)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| Application Gateway for Containers | Layer 7 load balancing and traffic management for AKS workloads, configured through Kubernetes Gateway API or Ingress resources. | Amazon VPC Lattice, Application Load Balancer |
| Azure Application Gateway (v2) | Regional layer 7 load balancer with path and host routing, TLS termination, autoscaling, zone redundancy, rewrites, and an optional WAF. Application Gateway… | Application Load Balancer |
| Azure DDoS Protection | Infrastructure DDoS protection is free and automatic. Paid DDoS Network Protection (priced per 100 protected public IPs) and DDoS IP Protection (per protected… | AWS Shield (Standard and Advanced) |
| Azure DNS (public zones) | Authoritative DNS hosting on Azure's anycast name servers, with DNSSEC signing, alias records, and Azure RBAC. Domain registration is separate (for example,… | Amazon Route 53 (DNS hosting and domains) |
| Azure DNS Private Resolver | Managed inbound and outbound DNS endpoints and forwarding rulesets for hybrid DNS between Azure and on-premises networks. | Route 53 Resolver (endpoints and rules) |
| Azure ExpressRoute | Private connections from your network to Microsoft through a connectivity provider or ExpressRoute Direct, with private peering (virtual networks) and… | AWS Direct Connect |
| Azure Firewall | Managed, stateful, autoscaling network firewall in Basic, Standard, and Premium tiers, with FQDN filtering, threat intelligence, and (Premium) TLS inspection… | AWS Network Firewall |
| Azure Firewall Manager | Central management of firewall policies and security routing for Azure Firewall in hub virtual networks and secured Virtual WAN hubs, plus DDoS and WAF policy… | AWS Firewall Manager |
| Azure Front Door (Standard and Premium) | Global layer 7 CDN and application delivery network with caching, global load balancing, WAF, bot protection, and Private Link origins (Premium). Front Door… | Amazon CloudFront |
| Azure Front Door edge actions Preview | Custom JavaScript that runs at Front Door PoPs on client requests (header changes, URL rewrite and redirect, request rejection, origin selection, JWT… | CloudFront Functions |
| Azure Front Door rule sets | No-code rules that match on request properties and modify headers, rewrite or redirect URLs, override caching, and change origin groups at the edge. | CloudFront Functions |
| Azure Gateway Load Balancer | Chains network virtual appliances transparently in front of a Standard public load balancer or VM IP configuration, using VXLAN encapsulation. | Gateway Load Balancer |
| Azure global (cross-region) load balancer | Global tier of Standard Load Balancer that provides a static anycast public IP in front of regional Standard load balancers, for layer 4 geo-redundancy. | AWS Global Accelerator |
| Azure Load Balancer (Standard) | Layer 4 (TCP and UDP) load balancer, public or internal, zone-redundant, with outbound rules and HA ports. Basic Load Balancer retired September 30, 2025. | Network Load Balancer |
| Azure NAT Gateway | Managed outbound-only NAT for subnets, using up to 16 static public IPv4 addresses (and, on the zone-redundant StandardV2 SKU, up to 16 IPv6 addresses), with… | NAT gateway (zonal and regional) |
| Azure Network Watcher | Network monitoring and diagnostics, including connection troubleshoot, IP flow verify, next hop, effective security rules, packet capture, connection monitor,… | VPC Reachability Analyzer and Network Access Analyzer, VPC Traffic Mirroring |
| Azure Private DNS zones | DNS zones that resolve inside linked virtual networks, with optional auto-registration of VM records. | Route 53 private hosted zones |
| Azure Private Link and private endpoints | Private endpoints place a private IP for an Azure PaaS resource, partner service, or your own Private Link service inside your virtual network. | AWS PrivateLink (interface endpoints), Amazon VPC Lattice |
| Azure Route Server | Managed BGP route reflector that exchanges routes between network virtual appliances and the virtual network, without manual route-table updates. | Amazon VPC Route Server |
| Azure Traffic Manager | DNS-based global traffic routing (priority, weighted, performance, geographic, multivalue, subnet) with endpoint health monitoring and nested profiles. | Route 53 routing policies and health checks |
| Azure Virtual Network | Isolated private network in a region, with your own IPv4 and IPv6 address space, subnets, routing, and security. Subnets are regional and span availability… | Amazon VPC, VPC subnets |
| Azure Virtual Network Manager | Centrally groups virtual networks across subscriptions and regions to deploy connectivity (mesh or hub-and-spoke), security admin rules, routing, and IP… | Amazon VPC IP Address Manager (IPAM), Network ACLs, AWS Transit Gateway, AWS Cloud WAN |
| Azure Virtual WAN | Microsoft-managed hubs (full mesh in the Standard type) that connect virtual networks, branches (VPN and SD-WAN), remote users, and ExpressRoute, with… | AWS Transit Gateway, AWS Cloud WAN |
| Azure VPN Gateway (site-to-site) | IPsec/IKE VPN gateways for site-to-site and VNet-to-VNet connections, in active-standby or active-active mode, with route-based or policy-based VPNs.… | AWS Site-to-Site VPN |
| Azure VPN Gateway point-to-site | Remote-access VPN over OpenVPN, IKEv2, or SSTP, with certificate, RADIUS, or Microsoft Entra ID authentication. | AWS Client VPN |
| Azure Web Application Firewall | WAF policies with managed rule sets (OWASP-based default rules), custom rules, rate limiting, and bot protection, deployed on Application Gateway (regional)… | AWS WAF |
| DNS resolver policy (with threat intelligence) | Filters and logs DNS queries at the virtual network level with allow, alert, and block rules on domain lists, plus an optional Microsoft-managed threat… | Route 53 Resolver DNS Firewall |
| ExpressRoute Global Reach | Links ExpressRoute circuits together so on-premises sites can exchange traffic over the Microsoft backbone. Circuits in different geopolitical regions need… | Direct Connect gateway |
| Network security groups and application security groups | Stateful, prioritized allow and deny rules applied to subnets or network interfaces. Application security groups let rules target groups of VMs instead of IP… | Security groups, Network ACLs |
| Private subnets (default outbound access off) | Subnets with default outbound access turned off, so VMs need an explicit outbound method (NAT Gateway, Standard Load Balancer outbound rules, public IP, or… | Internet gateway (and egress-only internet gateway), VPC Block Public Access |
| Public IP addresses and prefixes | Standard SKU static public IPv4 and IPv6 addresses, contiguous public IP prefixes, and custom IP prefixes (bring your own IP). Basic SKU public IPs retired… | Elastic IP addresses (and BYOIP), Internet gateway (and egress-only internet gateway) |
| User-defined routes (route tables) | Custom static routes in route tables associated with subnets, overriding Azure's default system routes (for example, to send traffic through a firewall). | VPC route tables |
| Virtual network flow logs | Network Watcher feature that records IP traffic through virtual networks, subnets, or NICs to a storage account, with optional traffic analytics. It replaces… | VPC Flow Logs |
| Virtual network peering | Connects virtual networks in the same region or across regions (global peering) over the Microsoft backbone. Peering is non-transitive. | VPC peering |
| Virtual network service endpoints | Free subnet setting that routes traffic to supported Azure services (such as Storage and SQL) over the Azure backbone using the subnet's identity, so the… | Gateway VPC endpoints |
| Virtual network TAP Preview | Continuously mirrors VM network traffic to a packet collector or analytics tool. In public preview in select regions when verified. | VPC Traffic Mirroring |
Identity & Security(26)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| Azure Cloud HSM | Highly available, single-tenant HSM clusters (FIPS 140-3 Level 3) where you have full administrative control, accessed through PKCS#11, JCE, and OpenSSL. It… | AWS CloudHSM |
| Azure Key Vault | Stores keys, secrets, and certificates. Standard uses software-protected keys, and Premium adds HSM-protected keys (FIPS 140-3 Level 3 HSMs), with RBAC, soft… | AWS Key Management Service (KMS), AWS Secrets Manager |
| Azure Key Vault Managed HSM | Fully managed, single-tenant HSM pools (FIPS 140-3 Level 3) for keys only, with local RBAC and customer-controlled security domain. | AWS Key Management Service (KMS) |
| Azure landing zones (Cloud Adoption Framework) | Microsoft's reference architecture and deployable implementations (portal accelerator, Bicep, Terraform) for management groups, policies, identity,… | AWS Control Tower |
| Azure management groups and subscriptions | A hierarchy of management groups (up to six levels of depth, not counting the root and subscriptions) containing subscriptions, where policy and RBAC… | AWS Organizations |
| Azure Monitor activity log (and Entra audit logs) | Subscription-level control-plane events (create, update, delete, and actions) kept for 90 days, exportable through diagnostic settings to Log Analytics,… | AWS CloudTrail |
| Azure Policy | Evaluates and enforces rules on Azure resources (deny, audit, modify, deployIfNotExists), grouped into initiatives and assigned at any scope, with compliance… | Service control policies and resource control policies, AWS Config |
| Azure Resource Graph (inventory and change analysis) | KQL queries across subscriptions for resource inventory, policy compliance, and resource property changes (change history). | AWS Config |
| Azure role-based access control (Azure RBAC) | Authorizes access to Azure resources by assigning built-in or custom roles to Entra principals at management group, subscription, resource group, or resource… | AWS Identity and Access Management (IAM), AWS Resource Access Manager (RAM) |
| Defender for Cloud CSPM (Foundational and Defender CSPM) | Posture management. Free Foundational CSPM gives secure score and Microsoft Cloud Security Benchmark recommendations, and paid Defender CSPM adds attack… | AWS Audit Manager, AWS Security Hub CSPM, AWS Security Hub |
| Defender for Servers (with Defender Vulnerability Management) | Server protection in Plan 1 and Plan 2, integrating Defender for Endpoint and Defender Vulnerability Management, with agentless vulnerability and secrets… | Amazon Inspector |
| Key Vault certificates | Creates, imports, and auto-renews X.509 certificates, self-signed or issued through integrated public CAs (DigiCert, GlobalSign), and deploys them to App… | AWS Certificate Manager (ACM) |
| Managed identities for Azure resources | System-assigned or user-assigned Entra identities for Azure resources, so code gets tokens for Azure services without storing credentials. | IAM roles for AWS services |
| Microsoft Defender for Cloud (workload protection) | Cloud-native application protection with paid Defender plans for servers, containers, storage, databases, App Service, Key Vault, Resource Manager, APIs, and… | Amazon GuardDuty |
| Microsoft Entra Domain Services | Managed domain (domain join, Group Policy, LDAP, Kerberos and NTLM) synced from Entra ID, without deploying domain controllers. | AWS Directory Service |
| Microsoft Entra External ID | Customer and partner identity. External tenants handle consumer and business-customer sign-up and sign-in with social and enterprise IdPs, and B2B… | Amazon Cognito |
| Microsoft Entra ID | Microsoft's cloud identity provider for users, groups, apps, and devices, with SSO (SAML, OIDC), MFA, Conditional Access, app registrations, and hybrid sync… | AWS Identity and Access Management (IAM), AWS IAM Identity Center |
| Microsoft Entra ID Governance (access reviews) | Identity lifecycle workflows, entitlement management, and recurring access reviews of group memberships, app assignments, and role assignments. | IAM Access Analyzer |
| Microsoft Entra Private Access | Identity-centric zero trust network access (part of Global Secure Access) to private apps by FQDN or IP, without a traditional VPN, with Conditional Access… | AWS Verified Access |
| Microsoft Entra Privileged Identity Management (PIM) | Just-in-time, time-bound, approval-based activation of Entra and Azure roles, with access reviews and audit history. | AWS IAM Identity Center |
| Microsoft Entra workload identity federation | Lets an app registration or user-assigned managed identity trust tokens from external IdPs (GitHub Actions, Kubernetes, Google, AWS, other OIDC issuers)… | IAM Roles Anywhere, AWS Identity and Access Management (IAM) |
| Microsoft Purview (data classification and DSPM) | Data governance and security, including Data Map scanning with sensitive-information classifiers, Information Protection labels, DLP, and Data Security… | Amazon Macie |
| Microsoft Purview Compliance Manager | Pre-built and custom assessments for regulations and standards, with improvement actions and a compliance score (available assessments depend on licensing). | AWS Audit Manager |
| Microsoft Sentinel | Cloud-native SIEM and SOAR with data connectors, analytics rules, UEBA, hunting, incidents, and playbooks. Sentinel is moving to the Microsoft Defender portal… | Amazon Detective |
| Microsoft Sentinel data lake | Low-cost, long-retention security data lake in open format with tiered storage and a single copy of data, queryable with KQL, notebooks, and jobs alongside… | Amazon Security Lake |
| Microsoft Service Trust Portal | Microsoft's audit reports (SOC, ISO, PCI, FedRAMP), compliance guides, and trust documents for its cloud services. | AWS Artifact |
AI & Machine Learning(50)
| Azure service | What it is | AWS equivalent(s) |
|---|---|---|
| Azure AI Anomaly Detector Retired | Univariate and multivariate time-series anomaly detection. | Amazon Lookout for Equipment, Amazon Monitron |
| Azure AI Bot Service | Hosting, registration, and channel connectors (Teams, web chat, and more) for bots and agents built with the Microsoft 365 Agents SDK / Bot Framework or… | Amazon Lex V2 |
| Azure AI Content Safety | Standalone text and image moderation APIs, Prompt Shields (jailbreak and indirect-attack detection), groundedness detection (preview), protected-material… | Amazon Bedrock Guardrails, Amazon Rekognition, Amazon Comprehend |
| Azure AI Metrics Advisor Retired | Metric monitoring and anomaly diagnosis. | Amazon Lookout for Metrics |
| Azure AI Personalizer Retired | Reinforcement-learning-based personalization (contextual bandits). | Amazon Personalize |
| Azure AI Video Indexer | Video and audio insights (transcription, translation, faces, objects, OCR, topics, generative summaries). Available cloud-based or at the edge through Azure… | Amazon Rekognition |
| Azure Content Understanding | GenAI-based extraction of user-defined schemas from documents, images, audio, and video, with confidence scores, grounding, classification, and prebuilt… | Amazon Bedrock Data Automation, Amazon Rekognition, Amazon Transcribe Call Analytics |
| Azure Copilot | AI assistant in the Azure portal, CLI, and other surfaces that answers questions about Azure, and helps inspect and operate your resources. | Amazon Q Developer |
| Azure Custom Vision Deprecated | Train custom image classifiers and object detectors. | Amazon Rekognition Custom Labels |
| Azure Document Intelligence | OCR/Read, layout (tables, figures, markdown), prebuilt models (invoice, receipt, ID, tax, mortgage, and more), and custom extraction and classification models. | Amazon Textract |
| Azure Face | Face detection, verification, identification, and liveness. | Amazon Rekognition |
| Azure Health Data Services | FHIR service, DICOM service, and a de-identification service for PHI. | AWS HealthLake |
| Azure Language | Text NLP APIs, also exposed as tools via the Azure Language MCP server. | Amazon Comprehend, Amazon Bedrock Guardrails, Amazon Transcribe Call Analytics |
| Azure Machine Learning | End-to-end ML platform. Workspaces, data and compute, training jobs, AutoML, pipelines, registries, endpoints, MLflow integration, and responsible AI tooling. | Amazon SageMaker JumpStart, Amazon Bedrock Marketplace, Amazon SageMaker AI, Amazon SageMaker Unified Studio, Amazon Personalize, Amazon Fraud Detector |
| Azure Machine Learning pipelines | Component-based ML workflows (SDK v2/CLI v2/Designer), schedulable and reusable through registries. | Amazon SageMaker Pipelines |
| Azure Machine Learning studio & compute instances | Web portal with notebooks, plus compute instances (managed dev VMs) that work with JupyterLab and VS Code. | Amazon SageMaker Studio |
| Azure ML automated ML (AutoML) | AutoML for classification, regression, forecasting, computer vision, and NLP, from code (SDK/CLI v2) or a no-code studio UI. | SageMaker Autopilot, Amazon SageMaker Canvas, Amazon Rekognition Custom Labels, Amazon Forecast |
| Azure ML compute clusters & serverless compute | Managed CPU/GPU clusters and serverless compute for command, sweep, and distributed (multinode) training jobs. | SageMaker AI training jobs, Amazon SageMaker HyperPod |
| Azure ML data labeling Retired | Image and text labeling projects with ML-assisted labeling. | Amazon SageMaker Ground Truth |
| Azure ML Designer | Drag-and-drop pipeline builder. | Amazon SageMaker Pipelines, Amazon SageMaker Canvas |
| Azure ML managed feature store | Feature-set specifications with managed materialization to offline and online stores, plus point-in-time joins. | Amazon SageMaker Feature Store |
| Azure ML model monitoring | Built-in signals (data drift, prediction drift, data quality, feature attribution drift, model performance) with thresholds and alerts through Azure ML or… | Amazon SageMaker Model Monitor |
| Azure ML model registry & registries | Workspace model registry plus cross-workspace registries for sharing models, components, and environments (dev to test to prod MLOps). | SageMaker Model Registry |
| Azure ML on Kubernetes (AKS / Arc) | Attach AKS or Arc-enabled Kubernetes clusters as Azure ML compute targets for training and online inference. | Amazon SageMaker HyperPod |
| Azure ML online & batch endpoints | Managed online endpoints (real-time, multiple deployments with traffic split), Kubernetes online endpoints, batch endpoints (async jobs on clusters), and… | SageMaker AI inference (endpoints) |
| Azure ND-series GPU VMs | AI training/HPC VMs. ND A100 v4, ND H100 v5, ND H200 v5, ND MI300X v5 (AMD), ND GB200 v6, and ND GB300 v6 (NVIDIA Blackwell). | Amazon EC2 accelerated computing (NVIDIA GPU) |
| Azure Speech | Speech to text (real-time, fast, and batch transcription, custom speech), neural text to speech (custom voice), speech translation, pronunciation assessment,… | Amazon Transcribe, Amazon Polly, Amazon Transcribe Call Analytics, Amazon Nova, AWS HealthScribe |
| Azure Translator | Neural text translation (2026-06-06 GA API with selectable LLMs and adaptive custom translation), document translation (batch and single-file),… | Amazon Translate |
| Azure Vision – Image Analysis Deprecated | Prebuilt image tagging, captioning, object detection, OCR (Read), smart crops, and image embeddings. | Amazon Rekognition |
| Conversational language understanding (CLU) Deprecated | Intent and entity models for conversational apps. | Amazon Lex V2 |
| Data Science Virtual Machines | Preconfigured VM images with Python, R, Jupyter, and deep learning frameworks. | AWS Deep Learning AMIs |
| Foundry Agent Service | Managed agent platform. Prompt agents (declarative), voice-based prompt agents (Voice Live), and hosted agents (your container or zip, any framework), plus… | Amazon Bedrock AgentCore, Amazon Bedrock Agents Classic, Amazon Nova |
| Foundry deployment types (Standard, Provisioned, Batch) | Global, Data Zone, and Regional deployment types, each in Standard (pay-per-token), Provisioned (PTU reserved throughput), or Batch variants. | Amazon Bedrock Provisioned Throughput & cross-Region inference |
| Foundry fine-tuning | Supervised fine-tuning, preference fine-tuning (DPO), and reinforcement fine-tuning (model-specific), plus distillation via teacher-generated data. Deploy… | Amazon Bedrock model customization |
| Foundry guardrails (content filters) | Named collections of controls applied to models and agents at user input, tool call, tool response, and output, with severity-based blocking. | Amazon Bedrock AgentCore, Amazon Bedrock Guardrails, Amazon Comprehend |
| Foundry IQ (knowledge bases) Preview | Multi-source, permission-aware knowledge bases for agents, using agentic retrieval on Azure AI Search, with sources such as Blob, SharePoint, OneLake, and the… | Amazon Bedrock Knowledge Bases |
| Foundry observability & evaluations | Tracing, built-in and custom evaluators (quality, safety, agent metrics), continuous evaluation, and monitoring dashboards. Also includes Agent optimizer… | Amazon Bedrock Evaluations, Amazon Bedrock AgentCore |
| GitHub Copilot | AI coding assistant. Completions, chat, code review, and a coding agent that works on assigned issues inside GitHub and IDEs. | Kiro, Amazon Q Developer |
| Microsoft 365 Copilot | Generative AI assistant across Microsoft 365 apps, grounded on Microsoft Graph work data, with agents. | Amazon Quick, Amazon Q Business |
| Microsoft Agent Framework | Microsoft's open-source SDK for building agents and multi-agent workflows in code. Recommended as the replacement for Prompt flow and as a hosted-agent… | Amazon Bedrock Flows & Prompt management, Strands Agents SDK |
| Microsoft Copilot Studio | Low-code studio to build agents and workflows, connect them to enterprise data and systems, and publish to Teams, Microsoft 365 Copilot, web, and other… | Amazon Quick, Amazon Q Business, Amazon Lex V2 |
| Microsoft Fabric Data Science | Notebooks, Spark, MLflow-based experiments and models, and SynapseML inside Fabric, integrated with Azure Machine Learning. | Amazon SageMaker Unified Studio |
| Microsoft Foundry | Unified Azure platform for models, agents, and tools under one resource provider, with tracing, evaluations, RBAC, networking, and policy. | Amazon Bedrock |
| Microsoft Foundry Models (incl. Azure OpenAI) | Catalog of 10,000+ models. "Sold by Azure" (Azure OpenAI GPT family, Microsoft MAI/Phi, xAI Grok, DeepSeek, Meta, Mistral, Cohere, Black Forest Labs,… | Amazon Bedrock, Amazon Nova, Amazon SageMaker JumpStart, Amazon Bedrock Marketplace, Amazon Rekognition |
| Microsoft Maia 200 Preview | Microsoft first-party AI inference accelerator (TSMC 3nm, FP8/FP4, 216GB HBM3e), deployed in US Central with US West 3 next. | AWS Trainium (Trn1, Trn2, Trn3), AWS Inferentia (Inf2) |
| Microsoft models in Foundry (MAI, Phi, Model Router) | Microsoft first-party models sold by Azure, including MAI models (for example MAI-Image), the Phi small language models, Model Router, and healthcare AI models. | Amazon Nova, AWS HealthScribe |
| MLflow in Azure Machine Learning | Azure ML workspaces are MLflow-compatible tracking servers and model registries, with no separate MLflow server to run. | Managed MLflow on SageMaker AI |
| Prompt flow Deprecated | Visual/code orchestration of LLM, prompt, and Python tool flows. | Amazon Bedrock Flows & Prompt management |
| Responsible AI dashboard (Azure ML) | Error analysis, fairness assessment, model interpretability, counterfactuals, and causal analysis in a single dashboard. | Amazon SageMaker Clarify |
| Text Analytics for health | Medical NER, relation extraction, entity linking to UMLS vocabularies, and assertion detection. Hosted API or Docker container. | Amazon Comprehend Medical, AWS HealthScribe |