Cloud Equivalents

CDN, edge compute & global acceleration

CloudFront Functions vs Azure Front Door rule sets / Azure Front Door edge actions

CloudFront Functions maps to Azure Front Door rule sets (no-code rules) and Front Door edge actions (custom JavaScript, in preview).

Partial match Use it to: Rewrite URLs, redirect, add security headers, validate tokens, or run A/B tests at the edge on every request.

Last verified: · Edit on GitHub · Report an error

Side-by-side comparison

Lightweight edge request logic: AWS vs Azure side by side
AspectAmazon Web ServicesMicrosoft Azure
ServiceCloudFront FunctionsAzure Front Door rule sets
Azure Front Door edge actions Preview
LifecycleGenerally availableGenerally available
preview
What it isLightweight JavaScript functions that run at CloudFront edge locations on viewer requests and responses, with sub-millisecond startup and an optional key-value store.No-code rules that match on request properties and modify headers, rewrite or redirect URLs, override caching, and change origin groups at the edge.
Custom JavaScript that runs at Front Door PoPs on client requests (header changes, URL rewrite and redirect, request rejection, origin selection, JWT validation), with a 16 KB code and 10 ms execution limit in preview.
Pricing modelPer million invocations (included in flat-rate plans).Rule sets are included in Front Door pricing (with limits by tier). Check the pricing page for edge actions.
DocsCloudFront Functions docsAzure Front Door rule sets docs
Azure Front Door edge actions docs
Pricing pageCloudFront Functions pricingAzure Front Door rule sets pricing
Azure Front Door edge actions pricing
ExamsDVA-C02 Retiring ANS-C01 RetiringAZ-700

Key differences

  • Code. CloudFront Functions run JavaScript on viewer request and viewer response events, with sub-millisecond startup and an optional CloudFront KeyValueStore. Edge actions run JavaScript on client requests only during preview, with a 16 KB code limit and a 10 ms execution limit.
  • No-code. Many CloudFront Functions use cases (redirects, header changes, URL rewrites) are handled on Azure by rule set actions without code.
  • Maturity. CloudFront Functions is generally available. Edge actions was in preview when verified.

Pricing summary

Pricing models only. No prices are quoted because they change by region and over time.

AWS
Per million invocations (included in flat-rate plans). CloudFront Functions pricing →
Azure
Rule sets are included in Front Door pricing (with limits by tier). Check the pricing page for edge actions. Azure Front Door rule sets pricing → Azure Front Door edge actions pricing →

Certification exam mapping

ExamProviderLevelStatus
AWS Certified Developer – Associate DVA-C02AWSAssociateretiring
Being updated to DVA-C03. Registration for DVA-C03 opens Oct 27, 2026. Last day to take DVA-C02 is Nov 30, 2026.
AWS Certified Advanced Networking – Specialty ANS-C01AWSSpecialtyretiring
The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period.
Microsoft Certified – Azure Network Engineer Associate AZ-700AzureAssociatecurrent

Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.

Verification notes

  • Front Door edge actions was in public preview when verified, so limits and pricing may change at GA.

FAQ

What is the Azure equivalent of CloudFront Functions?

CloudFront Functions maps to Azure Front Door rule sets (no-code rules) and Front Door edge actions (custom JavaScript, in preview).

How does pricing compare between CloudFront Functions and Azure Front Door rule sets and Azure Front Door edge actions?

AWS: Per million invocations (included in flat-rate plans). Azure: Rule sets are included in Front Door pricing (with limits by tier). Check the pricing page for edge actions. Check the official pricing pages for current rates.

Which certification exams cover this topic?

AWS Certified Developer – Associate (DVA-C02) [retiring]; AWS Certified Advanced Networking – Specialty (ANS-C01) [retiring]; Microsoft Certified – Azure Network Engineer Associate (AZ-700).

Related comparisons

Official sources