Microsoft Azure → Amazon Web Services
AWS equivalent of Foundry guardrails (content filters)
The closest AWS equivalents of Foundry guardrails (content filters) are Amazon Bedrock AgentCore, Amazon Bedrock Guardrails and Amazon Comprehend.
About Foundry guardrails (content filters)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available Agent guardrails, tool-call/tool-response intervention points, and PII risk are in preview. |
| What it is | Named collections of controls applied to models and agents at user input, tool call, tool response, and output, with severity-based blocking. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (3)
| Capability | AWS equivalent | Match |
|---|---|---|
| Agent identity, policy & registry | Amazon Bedrock AgentCore | Partial match |
| GenAI guardrails & content safety | Amazon Bedrock Guardrails | Direct match |
| PII detection & redaction in text | Amazon Comprehend, Amazon Bedrock Guardrails | Direct match |
AI agents(1)
Agent identity, policy & registry Partial match
AgentCore Identity, Policy, and Registry map to Microsoft Entra agent identities, Foundry guardrails (tool-call controls), the Foundry control plane, and the Entra Agent Registry.
- AgentCore Identity vends short-lived credentials from a token vault, and works with any IdP (Cognito, Okta, Entra ID, Auth0).
- AgentCore Policy enforces deterministic rules on every tool call at the Gateway, written in natural language or Dogwood (Cedar-compatible).
- On Azure, hosted agents get a dedicated Microsoft Entra identity. Guardrails can inspect tool calls and tool responses (preview), and hosted agents support network egress controls (preview).
Safety, RAG & search(1)
GenAI guardrails & content safety Direct match
The Azure equivalent of Amazon Bedrock Guardrails is Foundry guardrails, which are powered by Azure AI Content Safety. Content Safety is also available as a standalone API, like Bedrock's ApplyGuardrail.
- Content categories differ. Bedrock filters Hate, Insults, Sexual, Violence, Misconduct, and Prompt Attack. Azure classifies Hate, Sexual, Self-harm, and Violence by severity, with Prompt Shields for jailbreak and indirect attacks.
- Only on Bedrock, Automated Reasoning checks (logic-rule validation of responses), plus denied topics and word filters (Azure uses blocklists and custom categories).
- Only on Azure, protected-material detection (known text and code) and task-adherence detection for agent tool use. Guardrails can also run at tool-call and tool-response intervention points for agents (preview).
Language & translation(1)
PII detection & redaction in text Direct match
Comprehend PII detection maps to Azure Language PII detection, which is a "core" Azure Language capability covering text, conversations, and documents.
- Azure also offers Document PII, a playground in Foundry, and synthetic-replacement anonymization (preview).
- For GenAI traffic, PII masking is built into Bedrock Guardrails (sensitive information filters) and Foundry guardrails (PII risk, preview).