Microsoft Azure → Amazon Web Services
AWS equivalent of Virtual network service endpoints
The closest AWS equivalent of Virtual network service endpoints is Gateway VPC endpoints.
About Virtual network service endpoints
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Free subnet setting that routes traffic to supported Azure services (such as Storage and SQL) over the Azure backbone using the subnet's identity, so the service firewall can allow that subnet. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Free backbone access to storage services | Gateway VPC endpoints | Partial match |
Private access to services(1)
Free backbone access to storage services Partial match
Gateway VPC endpoints (for S3 and DynamoDB) map most closely to Azure virtual network service endpoints. Both are free, use route or subnet configuration rather than an IP in your network, and let the service lock access to your network.
- Mechanism. A gateway endpoint adds a prefix-list route to your route tables, and bucket policies can require the endpoint. A service endpoint tags traffic with the subnet identity, and the service's firewall allows that subnet.
- Coverage. Gateway endpoints cover only S3 and DynamoDB. Service endpoints cover more Azure services (such as Storage, SQL, Key Vault, and Cosmos DB). Standard service endpoints add network identifiers and network security perimeter integration for some services.
- On-premises. Neither works from on-premises networks. Use interface endpoints or private endpoints for that.