Network security & firewalls · AWS vs Google Cloud
AWS WAF vs Google Cloud Armor
AWS WAF maps to Google Cloud Armor security policies with preconfigured WAF rules, custom rules, and rate limiting on load balancers.
Side-by-side comparison
| Aspect | Amazon Web Services | Google Cloud |
|---|---|---|
| Service | AWS WAF | Google Cloud Armor |
| Lifecycle | AWS WAF Classic is going through a planned end-of-life process, with Region-specific dates in the AWS Health Dashboard. Migrate to the current AWS WAF. | Generally available |
| What it is | Web application firewall for CloudFront, ALB, API Gateway, AppSync, Cognito, App Runner, and Verified Access, with managed rule groups, rate limiting, bot control, and fraud control. | WAF and DDoS protection for load balancers, in Standard and Cloud Armor Enterprise pricing models. |
| Pricing model | Per web ACL and rule per month plus per million requests, and extra for Bot Control and Fraud Control. | Standard pricing is usage-based, including a charge per million requests; Cloud Armor Enterprise is a subscription or pay-as-you-go enrollment. |
| Docs | AWS WAF docs | Google Cloud Armor docs |
| Pricing page | AWS WAF pricing | Google Cloud Armor pricing |
Key differences
- Cloud Armor attaches to Application Load Balancers and other supported load balancers, not directly to APIs or functions.
- Cloud Armor Enterprise adds managed protection features on top of Standard.
Pricing summary
Pricing models only. No prices are quoted because they change by region and over time.
- AWS
- Per web ACL and rule per month plus per million requests, and extra for Bot Control and Fraud Control. AWS WAF pricing →
- GCP
- Standard pricing is usage-based, including a charge per million requests; Cloud Armor Enterprise is a subscription or pay-as-you-go enrollment. Google Cloud Armor pricing →
And on Azure?
Direct match Azure's equivalent is Azure Web Application Firewall. AWS vs Azure comparison →
FAQ
What is the Google Cloud equivalent of AWS WAF?
AWS WAF maps to Google Cloud Armor security policies with preconfigured WAF rules, custom rules, and rate limiting on load balancers.
How does pricing compare between AWS WAF and Google Cloud Armor?
AWS: Per web ACL and rule per month plus per million requests, and extra for Bot Control and Fraud Control. Google Cloud: Standard pricing is usage-based, including a charge per million requests; Cloud Armor Enterprise is a subscription or pay-as-you-go enrollment. Check the official pricing pages for current rates.
What is the Azure equivalent?
Azure Web Application Firewall (direct match). AWS WAF maps to Azure Web Application Firewall, which runs on Application Gateway (regional) or Front Door (global).