Network security & firewalls · AWS vs Google Cloud
Security groups vs Cloud Next Generation Firewall
Security groups map to Cloud NGFW VPC firewall rules and network firewall policies, which are stateful and target VMs by network tags, secure tags, or service accounts.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | Security groups | Cloud Next Generation Firewall |
| Lifecycle | Generally available | Generally available |
| What it is | Stateful, allow-only virtual firewalls attached to network interfaces. Rules can reference other security groups instead of IP ranges. | Stateful distributed firewall with Essentials, Standard, and Enterprise tiers, VPC firewall rules, and network firewall policies. |
| Pricing model | Free. | Cloud NGFW Essentials has no additional charge; Standard and Enterprise features are billed by usage. |
| Docs | Security groups docs | Cloud Next Generation Firewall docs |
| Pricing page | Security groups pricing | Cloud Next Generation Firewall pricing |
Key differences
- Rules are defined on the VPC network or in firewall policies, not attached to network interfaces.
- Rules support both allow and deny with priorities, unlike security groups.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Free. Security groups pricing →
- GCP
- Cloud NGFW Essentials has no additional charge; Standard and Enterprise features are billed by usage. Cloud Next Generation Firewall pricing →
And on Azure?
Direct match Azure's equivalent is Network security groups and application security groups. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of Security groups?
Security groups map to Cloud NGFW VPC firewall rules and network firewall policies, which are stateful and target VMs by network tags, secure tags, or service accounts.
How does pricing compare between Security groups and Cloud Next Generation Firewall?
AWS: Free. Google Cloud: Cloud NGFW Essentials has no additional charge; Standard and Enterprise features are billed by usage. Check the official pricing pages for current rates.
What is the Azure equivalent?
Network security groups and application security groups (direct match). Security groups map to Azure network security groups (NSGs), with application security groups (ASGs) standing in for rules that reference other security groups.