Microsoft Azure → Amazon Web Services
AWS equivalent of Azure Private Link and private endpoints
The closest AWS equivalents of Azure Private Link and private endpoints are AWS PrivateLink (interface endpoints) and Amazon VPC Lattice.
About Azure Private Link and private endpoints
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Private endpoints place a private IP for an Azure PaaS resource, partner service, or your own Private Link service inside your virtual network. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (2)
| Capability | AWS equivalent | Match |
|---|---|---|
| Private endpoints for cloud and partner services | AWS PrivateLink (interface endpoints) | Direct match |
| Service-to-service application networking | Amazon VPC Lattice | Partial match |
Private access to services(2)
Private endpoints for cloud and partner services Direct match
AWS PrivateLink (interface VPC endpoints and endpoint services) maps to Azure Private Link (private endpoints and Private Link services).
- DNS. AWS interface endpoints can turn on private DNS for the service's default name automatically. Azure private endpoints usually rely on Azure Private DNS zones (privatelink.* zones) linked to the virtual network, often managed centrally with Azure Policy.
- Granularity. An Azure private endpoint maps to one specific resource instance (for example, one storage account). Many AWS interface endpoints map to a whole service in a Region, controlled with endpoint policies.
Service-to-service application networking Partial match
Microsoft states there's no single Azure equivalent of Amazon VPC Lattice. Depending on the scenario, combine Private Link (private access to services), Application Gateway for Containers (layer 7 routing for AKS), and API Management (centralized exposure and policy).
- VPC Lattice provides service networks that span VPCs and accounts, with IAM auth policies, layer 7 routing, and resource configurations for TCP resources such as databases. On Azure, those capabilities come from separate services you configure together.