Network security & firewalls · AWS vs Google Cloud
AWS Firewall Manager vs Hierarchical firewall policies
AWS Firewall Manager maps partly to hierarchical firewall policies, which apply firewall rules from the organization or folder level to every VPC network below.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | AWS Firewall Manager | Hierarchical firewall policies |
| Lifecycle | Generally available | Generally available |
| What it is | Centrally applies WAF, Shield Advanced, security group, Network Firewall, and DNS Firewall policies across accounts in AWS Organizations. | Firewall policies attached to the organization or folders that apply to every VPC network below them. |
| Pricing model | Per policy per Region per month, plus the AWS Config rules it uses. | Rules using only Cloud NGFW Essentials features have no charge; Standard and Enterprise features add charges. |
| Docs | AWS Firewall Manager docs | Hierarchical firewall policies docs |
| Pricing page | AWS Firewall Manager pricing | Hierarchical firewall policies pricing |
Key differences
- Hierarchy-based inheritance replaces Firewall Manager's account-based policies.
- Cloud Armor policies are managed separately from firewall policies.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per policy per Region per month, plus the AWS Config rules it uses. AWS Firewall Manager pricing →
- GCP
- Rules using only Cloud NGFW Essentials features have no charge; Standard and Enterprise features add charges. Hierarchical firewall policies pricing →
And on Azure?
Partial match Azure's equivalent is Azure Firewall Manager. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of AWS Firewall Manager?
AWS Firewall Manager maps partly to hierarchical firewall policies, which apply firewall rules from the organization or folder level to every VPC network below.
How does pricing compare between AWS Firewall Manager and Hierarchical firewall policies?
AWS: Per policy per Region per month, plus the AWS Config rules it uses. Google Cloud: Rules using only Cloud NGFW Essentials features have no charge; Standard and Enterprise features add charges. Check the official pricing pages for current rates.
What is the Azure equivalent?
Azure Firewall Manager (partial match). AWS Firewall Manager maps to Azure Firewall Manager for firewall policies.