Microsoft Azure → Amazon Web Services
AWS equivalent of Immutable storage for Blob Storage (WORM)
The closest AWS equivalent of Immutable storage for Blob Storage (WORM) is Amazon S3 Object Lock.
About Immutable storage for Blob Storage (WORM)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Time-based retention policies (unlocked or locked) and legal holds, set at the container level or, with version-level WORM, on the account, container, or individual blob versions. Helps address SEC 17a-4(f), CFTC 1.31(d), and FINRA. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| WORM / immutable object storage | Amazon S3 Object Lock | Direct match |
Object tiers, lifecycle & protection(1)
WORM / immutable object storage Direct match
S3 Object Lock maps to immutable storage for Azure Blob Storage. Both support time-based retention and legal holds, and both are assessed for SEC 17a-4(f), CFTC, and FINRA.
- Modes. Object Lock has governance mode (users with special permission can bypass it) and compliance mode (nobody can shorten it, not even root). Azure time-based policies are unlocked (editable, for testing) or locked (can only be extended), which is closest to compliance mode.
- Scope. Object Lock applies per object version, with bucket defaults. Azure has container-level WORM and version-level WORM (account, container, or blob version).
- Versioning. Object Lock requires versioning. Azure version-level WORM requires versioning; container-level WORM doesn't.