Routing & internet access
Internet gateway (and egress-only internet gateway) vs Public IP addresses and prefixes / Private subnets (default outbound access off)
Azure has no internet gateway resource.
Resources reach the internet through a public IP, NAT Gateway, load balancer outbound rules, or Azure Firewall. Default outbound access (implicit internet access for VMs) is being phased out with private subnets.
Side-by-side comparison
| Aspect | Amazon Web Services | Microsoft Azure |
|---|---|---|
| Service | Internet gateway (and egress-only internet gateway) | Public IP addresses and prefixes Private subnets (default outbound access off) |
| Lifecycle | Generally available | Generally available Generally available |
| What it is | Horizontally scaled VPC component that allows internet traffic to and from resources with public IPs. The egress-only variant allows outbound-only IPv6. | Standard SKU static public IPv4 and IPv6 addresses, contiguous public IP prefixes, and custom IP prefixes (bring your own IP). Basic SKU public IPs retired September 30, 2025. Subnets with default outbound access turned off, so VMs need an explicit outbound method (NAT Gateway, Standard Load Balancer outbound rules, public IP, or firewall). New virtual networks created with API versions released after March 31, 2026 default to private subnets. |
| Pricing model | Internet gateways are free. You pay for public IPv4 addresses and data transfer. | You pay for public IPs, NAT Gateway, or Firewall, plus data transfer. |
| Docs | Internet gateway (and egress-only internet gateway) docs | Public IP addresses and prefixes docs Private subnets (default outbound access off) docs |
| Pricing page | Internet gateway (and egress-only internet gateway) pricing | Public IP addresses and prefixes pricing Private subnets (default outbound access off) pricing |
| Exams | SAA-C03 ANS-C01 Retiring | AZ-104 AZ-700 |
Key differences
- Control. On AWS, a subnet without a route to an internet gateway has no internet path. On Azure, VMs in older subnets could get implicit default outbound access, which Microsoft is retiring in favor of explicit outbound methods.
- IPv6 egress-only. AWS has an egress-only internet gateway for IPv6. On Azure, use NAT Gateway StandardV2 (IPv6) or NSG rules.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Internet gateways are free. You pay for public IPv4 addresses and data transfer. Internet gateway (and egress-only internet gateway) pricing →
- Azure
- You pay for public IPs, NAT Gateway, or Firewall, plus data transfer. Public IP addresses and prefixes pricing → Private subnets (default outbound access off) pricing →
Certification exam mapping
| Exam | Provider | Level | Status |
|---|---|---|---|
| AWS Certified Solutions Architect – Associate SAA-C03 | AWS | Associate | current Italian version retires after Dec 31, 2026. |
| AWS Certified Advanced Networking – Specialty ANS-C01 | AWS | Specialty | retiring The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period. |
| Microsoft Certified – Azure Administrator Associate AZ-104 | Azure | Associate | current |
| Microsoft Certified – Azure Network Engineer Associate AZ-700 | Azure | Associate | current |
Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.
Verification notes
- Microsoft's default outbound change applies to new virtual networks created with API versions released after March 31, 2026. Existing virtual networks aren't changed.
FAQ
What is the Azure equivalent of Internet gateway (and egress-only internet gateway)?
Azure has no internet gateway resource. Resources reach the internet through a public IP, NAT Gateway, load balancer outbound rules, or Azure Firewall. Default outbound access (implicit internet access for VMs) is being phased out with private subnets.
How does pricing compare between Internet gateway (and egress-only internet gateway) and Public IP addresses and prefixes and Private subnets (default outbound access off)?
AWS: Internet gateways are free. You pay for public IPv4 addresses and data transfer. Azure: You pay for public IPs, NAT Gateway, or Firewall, plus data transfer. Check the official pricing pages for current rates.
Which certification exams cover this topic?
AWS Certified Solutions Architect – Associate (SAA-C03); AWS Certified Advanced Networking – Specialty (ANS-C01) [retiring]; Microsoft Certified – Azure Administrator Associate (AZ-104); Microsoft Certified – Azure Network Engineer Associate (AZ-700).