Microsoft Azure → Amazon Web Services
AWS equivalent of Defender for Cloud CSPM (Foundational and Defender CSPM)
The closest AWS equivalents of Defender for Cloud CSPM (Foundational and Defender CSPM) are AWS Audit Manager, AWS Security Hub CSPM and AWS Security Hub.
About Defender for Cloud CSPM (Foundational and Defender CSPM)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Posture management. Free Foundational CSPM gives secure score and Microsoft Cloud Security Benchmark recommendations, and paid Defender CSPM adds attack paths, the security explorer, agentless scanning, and regulatory compliance standards. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (2)
| Capability | AWS equivalent | Match |
|---|---|---|
| Compliance assessments and audit evidence | AWS Audit Manager Maintenance | Partial match |
| Cloud security posture management (CSPM) | AWS Security Hub CSPM, AWS Security Hub | Direct match |
Audit, configuration & compliance(1)
Compliance assessments and audit evidence Partial match
AWS Audit Manager maps to Microsoft Purview Compliance Manager and the regulatory compliance dashboard in Defender for Cloud. Audit Manager is in maintenance mode, and since April 30, 2026 it can't be set up in new accounts.
- Evidence. Audit Manager automatically collected evidence from Config, Security Hub, and CloudTrail into assessments. On Azure, Defender for Cloud regulatory compliance maps resource assessments to standards, and Compliance Manager tracks improvement actions and a compliance score.
- AWS alternatives. For new AWS customers, Security Hub CSPM standards and Config conformance packs cover much of the control-checking side.
Threat detection, posture & security operations(1)
Cloud security posture management (CSPM) Direct match
AWS Security Hub CSPM (the control checks formerly called Security Hub) maps to Defender for Cloud's free Foundational CSPM and the paid Defender CSPM plan. The newer AWS Security Hub, which correlates findings into exposures, maps to Defender CSPM's attack path analysis and risk prioritization.
- Standards. Security Hub CSPM runs checks for AWS Foundational Security Best Practices, CIS, PCI DSS, and NIST. Foundational CSPM uses the Microsoft Cloud Security Benchmark and secure score, and Defender CSPM adds regulatory standards, attack paths, the cloud security explorer, and agentless scanning.
- Naming. AWS renamed the original service Security Hub CSPM when it launched the new unified Security Hub. Older study material uses "Security Hub" for the control checks.