Network security & firewalls · AWS vs Google Cloud
Network ACLs: Google Cloud equivalent
Google Cloud has no stateless subnet ACLs.
All Cloud NGFW rules are stateful; use firewall rules with deny rules and priorities instead.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | Network ACLs | No first-party equivalent |
| Lifecycle | Generally available | — |
| What it is | Stateless, numbered allow and deny rules applied at the subnet boundary, evaluated in order for inbound and outbound traffic. | — |
| Pricing model | Free. | Not applicable. |
| Docs | Network ACLs docs | — |
| Pricing page | Network ACLs pricing | — |
Key differences
- Firewall policies can be applied hierarchically at organization and folder level.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Free. Network ACLs pricing →
- GCP
- Not applicable.
And on Azure?
Partial match Azure's equivalent is Network security groups and application security groups, Azure Virtual Network Manager. AWS vs Azure comparison →
FAQ
Does Google Cloud have an equivalent to Network ACLs?
Google Cloud has no stateless subnet ACLs. All Cloud NGFW rules are stateful; use firewall rules with deny rules and priorities instead.
How does pricing compare between Network ACLs and Google Cloud?
AWS: Free. Google Cloud: Not applicable. Check the official pricing pages for current rates.
What is the Azure equivalent?
Network security groups and application security groups and Azure Virtual Network Manager (partial match). Azure has no stateless network ACL.