Cloud Equivalents

Identity & access management

AWS Resource Access Manager (RAM) vs Azure role-based access control (Azure RBAC)

Microsoft maps AWS Resource Access Manager to Azure RBAC.

Because Azure subscriptions share one Entra tenant, you usually share by granting roles on a resource, rather than by creating resource shares.

Partial match Use it to: Let one team's network, rules, or other resources be used by other accounts in the organization.

Last verified: · Edit on GitHub · Report an error

Side-by-side comparison

Share resources across accounts: AWS vs Azure side by side
AspectAmazon Web ServicesMicrosoft Azure
ServiceAWS Resource Access Manager (RAM)Azure role-based access control (Azure RBAC)
LifecycleGenerally availableGenerally available
What it isShares resources such as subnets, transit gateways, Resolver rules, and license configurations across accounts or the whole organization.Authorizes access to Azure resources by assigning built-in or custom roles to Entra principals at management group, subscription, resource group, or resource scope, with deny assignments and ABAC conditions.
Pricing modelFree.Free.
DocsAWS Resource Access Manager (RAM) docsAzure role-based access control (Azure RBAC) docs
Pricing pageAWS Resource Access Manager (RAM) pricingAzure role-based access control (Azure RBAC) pricing
ExamsSAP-C02 Retiring ANS-C01 RetiringAZ-104 AZ-305

Key differences

  • On AWS, accounts are hard boundaries, so RAM explicitly shares subnets, transit gateways, and similar resources. On Azure, cross-subscription access works through role assignments in the same tenant, and some services have their own sharing (for example, Azure Compute Gallery or virtual network peering).

Pricing summary

Pricing models only. No prices are quoted because they change by region and over time.

AWS
Free. AWS Resource Access Manager (RAM) pricing →
Azure
Free. Azure role-based access control (Azure RBAC) pricing →

Certification exam mapping

ExamProviderLevelStatus
AWS Certified Solutions Architect – Professional SAP-C02AWSProfessionalretiring
Being updated to SAP-C03. Registration for SAP-C03 opens Oct 27, 2026. Last day to take SAP-C02 is Nov 16, 2026.
AWS Certified Advanced Networking – Specialty ANS-C01AWSSpecialtyretiring
The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period.
Microsoft Certified – Azure Administrator Associate AZ-104AzureAssociatecurrent
Microsoft Certified – Azure Solutions Architect Expert AZ-305AzureExpertcurrent
English version updated Apr 17, 2026.

Relevance is based on each exam's published scope, not a line-by-line objective match. Check the official study guide.

FAQ

What is the Azure equivalent of AWS Resource Access Manager (RAM)?

Microsoft maps AWS Resource Access Manager to Azure RBAC. Because Azure subscriptions share one Entra tenant, you usually share by granting roles on a resource, rather than by creating resource shares.

How does pricing compare between AWS Resource Access Manager (RAM) and Azure role-based access control (Azure RBAC)?

AWS: Free. Azure: Free. Check the official pricing pages for current rates.

Which certification exams cover this topic?

AWS Certified Solutions Architect – Professional (SAP-C02) [retiring]; AWS Certified Advanced Networking – Specialty (ANS-C01) [retiring]; Microsoft Certified – Azure Administrator Associate (AZ-104); Microsoft Certified – Azure Solutions Architect Expert (AZ-305).

Related comparisons

Official sources