AWS and Azure certification exams, mapped to services
Which comparisons to study for each AWS and Microsoft certification, including exams that are retiring or retired.
Relevance is based on each exam's published scope summary. Always check the official exam guide.
Amazon Web Services
AWS Certified AI Practitioner AIF-C01
Foundational · Italian and German versions retire after Oct 15, 2026 (per AWS cert page).
Storage (1)
AI & Machine Learning (26)
- Foundation model API platform
- Cloud provider's own foundation models
- Model, RAG & agent evaluation
- Managed AI agent platform
- GenAI guardrails & content safety
- Managed RAG / knowledge bases
- End-to-end ML platform
- AutoML
- No-code ML for analysts
- Bias detection & explainability
- Enterprise AI work assistant
- Prebuilt image analysis
- Face detection, verification & search
- Video analysis & indexing
- Image & text content moderation
- Custom image classification & detection
- Document OCR & form/table extraction
- Text analytics (entities, sentiment, key phrases)
- Custom text classification & entity recognition
- PII detection & redaction in text
- Machine translation
- Medical text analytics
- Speech to text
- Text to speech
- Contact-center call analytics
- Conversational bot builder (intents & dialog)
AWS Certified Machine Learning Engineer – Associate MLA-C01 Retiring
Associate · Being updated to MLA-C02 (beta registration opened Sep 1, 2026). Last day for MLA-C01 in English was Sep 28, 2026; Korean, Japanese, and Simplified Chinese remain until MLA-C02 GA.
AI & Machine Learning (28)
- Open-weight model hub on dedicated compute
- Foundation model fine-tuning & distillation
- End-to-end ML platform
- Unified data + analytics + AI workspace
- ML IDE & managed notebooks
- Managed training jobs
- Resilient large-scale FM training clusters
- Model hosting & inference endpoints
- ML pipelines / workflow orchestration
- Feature store
- Model registry
- Experiment tracking (MLflow)
- AutoML
- No-code ML for analysts
- Preconfigured deep learning VM images
- Bias detection & explainability
- Production model monitoring (drift)
- Data labeling (human + ML-assisted)
- Human-in-the-loop review of predictions
- Training debugging & profiling
- NVIDIA GPU instances for AI training
- Custom AI training silicon (rentable)
- Custom AI inference silicon (rentable)
- Custom image classification & detection
- Custom text classification & entity recognition
- Managed recommendation engine
- Time-series forecasting
- Managed fraud detection
AWS Certified Generative AI Developer – Professional
Professional · Exam code not confirmed from the official page at build time; shown by name only.
AI & Machine Learning (18)
- Foundation model API platform
- Cloud provider's own foundation models
- Open-weight model hub on dedicated compute
- Foundation model fine-tuning & distillation
- Reserved model throughput & cross-region routing
- Prompt & LLM workflow orchestration
- Model, RAG & agent evaluation
- GenAI multimodal content extraction (IDP)
- Managed AI agent platform
- Configuration-based agents (legacy Bedrock Agents)
- Agent tools, MCP gateway & sandboxes
- Agent memory (short- & long-term)
- Agent identity, policy & registry
- Open-source agent SDK from the cloud vendor
- GenAI guardrails & content safety
- Managed RAG / knowledge bases
- Enterprise / intelligent search
- Real-time speech-to-speech AI
AWS Certified Machine Learning – Specialty MLS-C01 Retired
Specialty · Retired; last exam day was Mar 31, 2026.
No comparisons mapped to this exam.
AWS Certified Cloud Practitioner CLF-C02
Foundational · Italian and German versions retire after Dec 31, 2026.
Compute (5)
- Virtual machines (IaaS)
- Spot (interruptible) VMs
- Spend-based commitment discounts (savings plans)
- Reserved instances
- Simple fixed-price VPS bundles
Storage (3)
Networking & Content Delivery (3)
Identity & Security (2)
AWS Certified Solutions Architect – Associate SAA-C03
Associate · Italian version retires after Dec 31, 2026.
Compute (18)
- Virtual machines (IaaS)
- Instance types and VM sizes
- Cloud provider's own Arm CPUs
- VM images and image sharing
- macOS cloud machines
- General-purpose bare-metal servers
- Spot (interruptible) VMs
- Spend-based commitment discounts (savings plans)
- Reserved instances
- Capacity reservations
- Dedicated (single-tenant) hosts
- VM auto scaling groups
- VM placement control
- Managed batch computing
- Managed web app platform
- Virtual desktops (DaaS/VDI)
- Application streaming
- Metro edge locations
Containers & Serverless (12)
- Managed Kubernetes
- Fully managed Kubernetes nodes ("autopilot" mode)
- Provider-native container orchestrator
- Serverless container compute
- Simplest way to run a containerized web app
- Serverless functions (FaaS)
- Visual workflow orchestration
- Event bus and event routing
- Message queues
- Pub/sub fan-out and notifications
- Managed open-source message brokers (ActiveMQ, RabbitMQ)
- Managed API gateway
Storage (35)
- Object storage
- Object storage access control and temporary sharing links
- Per-application access endpoints for a shared dataset
- Low-latency, high-request-rate object storage
- Object storage cost tiers (infrequent access and archive)
- Automatic access-based tiering
- Object lifecycle rules
- Object replication across regions or accounts
- WORM / immutable object storage
- Data lake storage with real directories
- Mount object storage as a file system
- Low-cost vector storage and similarity search
- Transform objects on read
- VM block storage volumes
- Attach one disk to several VMs (clustering)
- Block volume snapshots
- Local (ephemeral) VM disks
- Managed SAN (pooled iSCSI block storage)
- Kubernetes persistent volumes
- Serverless NFS file system for Linux
- Managed SMB / Windows file shares
- Managed NetApp ONTAP file storage
- Managed OpenZFS file system
- Managed Lustre parallel file system (HPC and AI)
- High-speed file cache in front of NFS or object data
- On-premises file gateway to cloud object storage
- On-premises cache for cloud Windows file shares
- Cloud-backed iSCSI volumes on premises
- Virtual tape library in the cloud
- Centralized backup service
- Immutable and isolated backup vaults (ransomware protection)
- Server replication and disaster recovery
- Online file and object migration
- Managed SFTP / FTP endpoints
- Offline bulk data transfer (ship or carry your data)
Databases (25)
- Managed PostgreSQL
- Managed MySQL
- Managed MariaDB
- Managed Microsoft SQL Server
- SQL Server (or Oracle) with OS-level control
- Managed Oracle Database
- Managed IBM Db2
- Cloud-native PostgreSQL (separate compute and storage)
- Cloud-native MySQL-compatible database
- Serverless relational database (autoscale and pause)
- Serverless, active-active distributed SQL
- In-region high availability with automatic failover
- Read replicas (in-region and cross-region)
- Cross-region relational disaster recovery
- Database connection pooling
- Serverless key-value and document database
- Multi-region, multi-active NoSQL replication
- NoSQL change data capture stream
- Built-in cache for a NoSQL database
- MongoDB-compatible document database
- Apache Cassandra-compatible wide-column database
- Graph database
- Managed in-memory cache (Redis-compatible)
- Durable in-memory primary database
- Database migration and continuous replication
Networking & Content Delivery (23)
- Private virtual network
- Subnets and availability zone placement
- Static public IP addresses
- Custom route tables
- Internet gateway (inbound and outbound internet access)
- Managed NAT for outbound traffic
- Stateful instance-level firewall rules
- Stateless subnet access control lists
- Web application firewall (WAF)
- DDoS protection
- Network peering
- Hub-and-spoke transit routing
- Site-to-site IPsec VPN
- Dedicated private connection to the cloud
- Private endpoints for cloud and partner services
- Free backbone access to storage services
- Public authoritative DNS hosting
- Hybrid DNS resolution
- DNS-based traffic routing and failover
- Layer 7 (HTTP/HTTPS) load balancing
- Layer 4 (TCP/UDP) load balancing
- Content delivery network (CDN)
- Global anycast entry point for TCP/UDP apps
Identity & Security (11)
- Cloud identity and access management
- Workforce single sign-on and MFA
- Credential-free identities for cloud workloads
- Customer identity and access management (CIAM)
- Managed Active Directory
- Multi-account organization hierarchy
- API and control-plane audit logs
- Managed encryption keys
- Secrets storage and rotation
- Managed TLS certificates
- Managed threat detection
AWS Certified Solutions Architect – Professional SAP-C02 Retiring
Professional · Being updated to SAP-C03. Registration for SAP-C03 opens Oct 27, 2026. Last day to take SAP-C02 is Nov 16, 2026.
Compute (14)
- Virtual machines (IaaS)
- Spend-based commitment discounts (savings plans)
- Reserved instances
- Capacity reservations
- Dedicated (single-tenant) hosts
- Bring-your-own-license and license tracking
- Rightsizing recommendations
- Managed batch computing
- HPC cluster management (Slurm and other schedulers)
- Low-latency HPC interconnect
- Provider infrastructure in your data center
- Metro edge locations
- Compute inside telecom 5G networks
- VMware environment in the cloud
Containers & Serverless (4)
- Managed Kubernetes
- Managed Kubernetes on-premises and at the edge
- Managed Red Hat OpenShift
- Managed open-source message brokers (ActiveMQ, RabbitMQ)
Storage (10)
- Object storage
- Per-application access endpoints for a shared dataset
- Low-latency, high-request-rate object storage
- Object replication across regions or accounts
- On-premises file gateway to cloud object storage
- Cloud-backed iSCSI volumes on premises
- Centralized backup service
- Server replication and disaster recovery
- Online file and object migration
- Offline bulk data transfer (ship or carry your data)
Databases (10)
- Managed Oracle Database
- Cloud-native PostgreSQL (separate compute and storage)
- Cloud-native MySQL-compatible database
- Serverless, active-active distributed SQL
- Horizontally sharded PostgreSQL
- Run SQL Server apps on PostgreSQL
- Cross-region relational disaster recovery
- Managed databases on your own hardware
- Multi-region, multi-active NoSQL replication
- Database migration and continuous replication
Networking & Content Delivery (4)
- Hub-and-spoke transit routing
- Policy-defined global WAN
- Dedicated private connection to the cloud
- Service-to-service application networking
Identity & Security (5)
AWS Certified CloudOps Engineer – Associate SOA-C03
Associate · Replaces AWS Certified SysOps Administrator – Associate (SOA-C02), whose last exam day was Sep 29, 2025. Simplified Chinese and Korean versions retire after Nov 19, 2026.
Compute (11)
- Virtual machines (IaaS)
- Instance types and VM sizes
- VM images and image sharing
- Automated image build pipelines
- VM hibernation
- Spot (interruptible) VMs
- VM auto scaling groups
- VM placement control
- Rightsizing recommendations
- Secure remote access to VMs
- OS patch management
Containers & Serverless (2)
Storage (14)
- Object storage
- Object storage access control and temporary sharing links
- Object storage cost tiers (infrequent access and archive)
- Automatic access-based tiering
- Object lifecycle rules
- Object replication across regions or accounts
- Bulk operations on billions of objects
- Object inventory and metadata reporting
- VM block storage volumes
- Attach one disk to several VMs (clustering)
- Block volume snapshots
- Serverless NFS file system for Linux
- Managed SMB / Windows file shares
- Centralized backup service
Databases (6)
- Managed PostgreSQL
- Managed MySQL
- Managed Microsoft SQL Server
- In-region high availability with automatic failover
- Read replicas (in-region and cross-region)
- Blue/green database upgrades
Networking & Content Delivery (4)
- Managed NAT for outbound traffic
- Layer 7 (HTTP/HTTPS) load balancing
- Network flow logs
- Network path and access analysis
Identity & Security (7)
AWS Certified Developer – Associate DVA-C02 Retiring
Associate · Being updated to DVA-C03. Registration for DVA-C03 opens Oct 27, 2026. Last day to take DVA-C02 is Nov 30, 2026.
Compute (1)
Containers & Serverless (20)
- Provider-native container orchestrator
- Serverless container compute
- Simplest way to run a containerized web app
- Container registry
- Serverless functions (FaaS)
- Cold-start mitigation for functions
- Shared function dependencies (layers)
- Built-in HTTPS endpoint for a function
- Serverless hosting for port-listening web apps
- Functions on dedicated or reserved instances
- Isolated sandboxes for untrusted or AI-generated code
- Visual workflow orchestration
- Durable workflows written as code
- Serverless scheduler
- Event bus and event routing
- Message queues
- Pub/sub fan-out and notifications
- Managed API gateway
- Managed GraphQL and real-time pub/sub APIs
- Static and SSR web hosting with Git CI/CD
Databases (11)
- Managed PostgreSQL
- Cloud-native PostgreSQL (separate compute and storage)
- Serverless relational database (autoscale and pause)
- Database connection pooling
- Serverless key-value and document database
- NoSQL change data capture stream
- Built-in cache for a NoSQL database
- Low-cost key-attribute table storage
- MongoDB-compatible document database
- Managed in-memory cache (Redis-compatible)
- Durable in-memory primary database
Networking & Content Delivery (2)
Identity & Security (5)
AWS Certified Security – Specialty SCS-C03
Specialty · The current code (SCS-C03) is taken from the exam-prep link on the official certification page. Simplified Chinese, Spanish (Latin America), and Portuguese (Brazil) versions retire after Dec 31, 2026.
Compute (3)
Containers & Serverless (1)
Storage (3)
- Object storage access control and temporary sharing links
- WORM / immutable object storage
- Immutable and isolated backup vaults (ransomware protection)
Networking & Content Delivery (12)
- Stateful instance-level firewall rules
- Block internet access at the account level
- Managed network firewall
- Web application firewall (WAF)
- DDoS protection
- Central firewall and security policy management
- Remote-access (client) VPN
- Private endpoints for cloud and partner services
- DNS query filtering
- Transparent load balancing for network appliances
- Network flow logs
- Packet mirroring
Identity & Security (25)
- Cloud identity and access management
- Workforce single sign-on and MFA
- Credential-free identities for cloud workloads
- Federation for workloads outside the cloud
- Just-in-time privileged access
- Find excessive, unused, or external access
- Customer identity and access management (CIAM)
- Fine-grained authorization for your own apps
- Zero trust access to private apps (VPN replacement)
- Organization-wide guardrail policies
- API and control-plane audit logs
- Resource configuration history and compliance rules
- Compliance assessments and audit evidence
- Provider compliance reports and agreements
- Managed encryption keys
- Single-tenant HSMs under your control
- Secrets storage and rotation
- Managed TLS certificates
- Managed private certificate authority
- Managed threat detection
- Cloud security posture management (CSPM)
- Vulnerability scanning for servers, containers, and functions
- Sensitive data discovery
- Security investigation and incident analysis
- Security data lake
AWS Certified Advanced Networking – Specialty ANS-C01 Retiring
Specialty · The exam is being retired. The last day to take it is Dec 31, 2026. Existing certifications stay active for their three-year period.
Containers & Serverless (1)
Networking & Content Delivery (37)
- Private virtual network
- Subnets and availability zone placement
- Static public IP addresses
- IP address management (IPAM)
- Custom route tables
- BGP routing with network appliances
- Internet gateway (inbound and outbound internet access)
- Managed NAT for outbound traffic
- Stateful instance-level firewall rules
- Stateless subnet access control lists
- Block internet access at the account level
- Managed network firewall
- Network peering
- Hub-and-spoke transit routing
- Policy-defined global WAN
- Site-to-site IPsec VPN
- Remote-access (client) VPN
- Dedicated private connection to the cloud
- Private circuits spanning regions and sites
- Private endpoints for cloud and partner services
- Free backbone access to storage services
- Service-to-service application networking
- Public authoritative DNS hosting
- Private DNS zones
- Hybrid DNS resolution
- DNS query filtering
- DNS-based traffic routing and failover
- Layer 7 (HTTP/HTTPS) load balancing
- Layer 4 (TCP/UDP) load balancing
- Transparent load balancing for network appliances
- Content delivery network (CDN)
- Lightweight edge request logic
- Full serverless functions at the CDN edge
- Global anycast entry point for TCP/UDP apps
- Network flow logs
- Network path and access analysis
- Packet mirroring
Identity & Security (2)
AWS Certified DevOps Engineer – Professional DOP-C02
Professional · Korean version retires after Dec 31, 2026.
Compute (2)
Containers & Serverless (9)
- Managed Kubernetes
- Fully managed Kubernetes nodes ("autopilot" mode)
- Kubernetes version support windows
- Pod-level cloud identity
- Managed GitOps and platform add-ons for Kubernetes
- Service mesh
- Provider-native container orchestrator
- Container registry
- Visual workflow orchestration
Storage (1)
Databases (1)
Identity & Security (1)
AWS Certified Data Engineer – Associate DEA-C01
Associate
Storage (2)
Databases (4)
- Serverless key-value and document database
- Serverless time-series database
- Managed InfluxDB
- Zero-ETL replication into analytics
Identity & Security (1)
Microsoft Azure
Microsoft Certified – Azure AI Fundamentals AI-901
Fundamentals · AI-901 replaces AI-900 for this certification (English version updated Apr 15, 2026). Covers Microsoft Foundry.
AI & Machine Learning (12)
- Foundation model API platform
- Cloud provider's own foundation models
- GenAI guardrails & content safety
- End-to-end ML platform
- AutoML
- No-code ML for analysts
- Bias detection & explainability
- Prebuilt image analysis
- Text analytics (entities, sentiment, key phrases)
- Machine translation
- Speech to text
- Text to speech
Microsoft Certified – Azure AI Apps and Agents Developer Associate AI-103
Associate · Generative AI and agentic solutions with Microsoft Foundry using Python. Successor in scope to the retired AI-102.
AI & Machine Learning (33)
- Foundation model API platform
- Cloud provider's own foundation models
- Open-weight model hub on dedicated compute
- Foundation model fine-tuning & distillation
- Reserved model throughput & cross-region routing
- Prompt & LLM workflow orchestration
- Model, RAG & agent evaluation
- GenAI multimodal content extraction (IDP)
- Managed AI agent platform
- Configuration-based agents (legacy Bedrock Agents)
- Agent tools, MCP gateway & sandboxes
- Agent memory (short- & long-term)
- Agent identity, policy & registry
- Open-source agent SDK from the cloud vendor
- GenAI guardrails & content safety
- Managed RAG / knowledge bases
- Enterprise / intelligent search
- Prebuilt image analysis
- Face detection, verification & search
- Video analysis & indexing
- Image & text content moderation
- Custom image classification & detection
- Document OCR & form/table extraction
- Text analytics (entities, sentiment, key phrases)
- Custom text classification & entity recognition
- PII detection & redaction in text
- Machine translation
- Medical text analytics
- Speech to text
- Text to speech
- Contact-center call analytics
- Real-time speech-to-speech AI
- Conversational bot builder (intents & dialog)
Microsoft Certified – Azure AI Cloud Developer Associate AI-200
Associate · Back-end services, containers, and architecture for AI solutions on Azure.
Containers & Serverless (10)
- Managed Kubernetes
- Provider-native container orchestrator
- Serverless container compute
- Simplest way to run a containerized web app
- Container registry
- Serverless hosting for port-listening web apps
- Isolated sandboxes for untrusted or AI-generated code
- Event bus and event routing
- Message queues
- Pub/sub fan-out and notifications
Identity & Security (3)
- Credential-free identities for cloud workloads
- Customer identity and access management (CIAM)
- Secrets storage and rotation
AI & Machine Learning (1)
Microsoft Certified – Machine Learning Operations Engineer Associate AI-300
Associate · MLOps and GenAIOps infrastructure on Azure (IaC with Bicep/CLI, GitHub Actions). Closest successor in scope to the retired DP-100.
AI & Machine Learning (22)
- Open-weight model hub on dedicated compute
- Foundation model fine-tuning & distillation
- Model, RAG & agent evaluation
- End-to-end ML platform
- Unified data + analytics + AI workspace
- ML IDE & managed notebooks
- Managed training jobs
- Resilient large-scale FM training clusters
- Model hosting & inference endpoints
- ML pipelines / workflow orchestration
- Feature store
- Model registry
- Experiment tracking (MLflow)
- AutoML
- No-code ML for analysts
- Preconfigured deep learning VM images
- Bias detection & explainability
- Production model monitoring (drift)
- NVIDIA GPU instances for AI training
- Custom image classification & detection
- Time-series forecasting
- Managed fraud detection
Microsoft Certified – AI Agent Builder Associate AB-620
Associate · Copilot Studio, Power Platform, Microsoft 365 Copilot, and Foundry agents.
AI & Machine Learning (2)
GitHub Copilot (GH-300) GH-COPILOT
Associate · GitHub certification delivered through Microsoft Learn (exam GH-300).
AI & Machine Learning (1)
Microsoft Certified – Azure AI Engineer Associate AI-102 Retired
Associate · Certification and renewal assessment are retired.
Storage (1)
Microsoft Certified – Azure Data Scientist Associate DP-100 Retired
Associate · Certification and renewal assessment are retired.
No comparisons mapped to this exam.
Microsoft Certified – Azure Fundamentals AZ-900
Fundamentals
Compute (3)
Storage (3)
Networking & Content Delivery (1)
Identity & Security (2)
Microsoft Certified – Azure Administrator Associate AZ-104
Associate
Compute (20)
- Virtual machines (IaaS)
- Instance types and VM sizes
- Cloud provider's own Arm CPUs
- VM images and image sharing
- Automated image build pipelines
- VM hibernation
- Spot (interruptible) VMs
- Spend-based commitment discounts (savings plans)
- Reserved instances
- Dedicated (single-tenant) hosts
- Bring-your-own-license and license tracking
- VM auto scaling groups
- VM placement control
- Rightsizing recommendations
- Managed web app platform
- Virtual desktops (DaaS/VDI)
- Application streaming
- Secure Boot and virtual TPM
- Secure remote access to VMs
- OS patch management
Containers & Serverless (8)
- Managed Kubernetes
- Fully managed Kubernetes nodes ("autopilot" mode)
- Kubernetes version support windows
- Pod-level cloud identity
- Provider-native container orchestrator
- Serverless container compute
- Simplest way to run a containerized web app
- Container registry
Storage (25)
- Object storage
- Object storage access control and temporary sharing links
- Object storage cost tiers (infrequent access and archive)
- Automatic access-based tiering
- Object lifecycle rules
- Object replication across regions or accounts
- WORM / immutable object storage
- Bulk operations on billions of objects
- Mount object storage as a file system
- Object inventory and metadata reporting
- VM block storage volumes
- Attach one disk to several VMs (clustering)
- Block volume snapshots
- Local (ephemeral) VM disks
- Kubernetes persistent volumes
- Serverless NFS file system for Linux
- Managed SMB / Windows file shares
- On-premises file gateway to cloud object storage
- On-premises cache for cloud Windows file shares
- Centralized backup service
- Immutable and isolated backup vaults (ransomware protection)
- Server replication and disaster recovery
- Online file and object migration
- Managed SFTP / FTP endpoints
- Offline bulk data transfer (ship or carry your data)
Databases (2)
Networking & Content Delivery (17)
- Private virtual network
- Subnets and availability zone placement
- Static public IP addresses
- Custom route tables
- Internet gateway (inbound and outbound internet access)
- Managed NAT for outbound traffic
- Stateful instance-level firewall rules
- Network peering
- Site-to-site IPsec VPN
- Private endpoints for cloud and partner services
- Free backbone access to storage services
- Public authoritative DNS hosting
- DNS-based traffic routing and failover
- Layer 7 (HTTP/HTTPS) load balancing
- Layer 4 (TCP/UDP) load balancing
- Network flow logs
- Network path and access analysis
Identity & Security (12)
- Cloud identity and access management
- Workforce single sign-on and MFA
- Credential-free identities for cloud workloads
- Share resources across accounts
- Managed Active Directory
- Multi-account organization hierarchy
- Organization-wide guardrail policies
- API and control-plane audit logs
- Resource configuration history and compliance rules
- Managed encryption keys
- Secrets storage and rotation
- Managed TLS certificates
Microsoft Certified – Azure Solutions Architect Expert AZ-305
Expert · English version updated Apr 17, 2026.
Compute (20)
- Virtual machines (IaaS)
- Instance types and VM sizes
- Cloud provider's own Arm CPUs
- General-purpose bare-metal servers
- Spot (interruptible) VMs
- Spend-based commitment discounts (savings plans)
- Reserved instances
- Capacity reservations
- Dedicated (single-tenant) hosts
- Bring-your-own-license and license tracking
- VM auto scaling groups
- VM placement control
- Rightsizing recommendations
- Managed batch computing
- HPC cluster management (Slurm and other schedulers)
- Low-latency HPC interconnect
- Provider infrastructure in your data center
- Metro edge locations
- VMware environment in the cloud
- Confidential computing
Containers & Serverless (9)
- Managed Kubernetes
- Fully managed Kubernetes nodes ("autopilot" mode)
- Managed Kubernetes on-premises and at the edge
- Managed Red Hat OpenShift
- Service mesh
- Serverless functions (FaaS)
- Visual workflow orchestration
- Managed open-source message brokers (ActiveMQ, RabbitMQ)
- Managed API gateway
Storage (29)
- Object storage
- Object storage access control and temporary sharing links
- Per-application access endpoints for a shared dataset
- Low-latency, high-request-rate object storage
- Object storage cost tiers (infrequent access and archive)
- Automatic access-based tiering
- Object replication across regions or accounts
- WORM / immutable object storage
- Data lake storage with real directories
- Managed open table storage (Apache Iceberg)
- Low-cost vector storage and similarity search
- Transform objects on read
- VM block storage volumes
- Attach one disk to several VMs (clustering)
- Managed SAN (pooled iSCSI block storage)
- Serverless NFS file system for Linux
- Managed SMB / Windows file shares
- Managed NetApp ONTAP file storage
- Managed OpenZFS file system
- Managed Lustre parallel file system (HPC and AI)
- High-speed file cache in front of NFS or object data
- On-premises file gateway to cloud object storage
- Cloud-backed iSCSI volumes on premises
- Virtual tape library in the cloud
- Centralized backup service
- Immutable and isolated backup vaults (ransomware protection)
- Server replication and disaster recovery
- Online file and object migration
- Offline bulk data transfer (ship or carry your data)
Databases (29)
- Managed PostgreSQL
- Managed MySQL
- Managed MariaDB
- Managed Microsoft SQL Server
- SQL Server (or Oracle) with OS-level control
- Managed Oracle Database
- Managed IBM Db2
- Cloud-native PostgreSQL (separate compute and storage)
- Cloud-native MySQL-compatible database
- Serverless relational database (autoscale and pause)
- Serverless, active-active distributed SQL
- Horizontally sharded PostgreSQL
- In-region high availability with automatic failover
- Read replicas (in-region and cross-region)
- Cross-region relational disaster recovery
- Database connection pooling
- Blue/green database upgrades
- Managed databases on your own hardware
- Serverless key-value and document database
- Multi-region, multi-active NoSQL replication
- Low-cost key-attribute table storage
- MongoDB-compatible document database
- Apache Cassandra-compatible wide-column database
- Serverless time-series database
- Managed InfluxDB
- Managed in-memory cache (Redis-compatible)
- Durable in-memory primary database
- Database migration and continuous replication
- Zero-ETL replication into analytics
Networking & Content Delivery (5)
- Hub-and-spoke transit routing
- Dedicated private connection to the cloud
- Private endpoints for cloud and partner services
- Service-to-service application networking
- Content delivery network (CDN)
Identity & Security (5)
Microsoft Certified – Azure Network Engineer Associate AZ-700
Associate
Compute (1)
Networking & Content Delivery (40)
- Private virtual network
- Subnets and availability zone placement
- Static public IP addresses
- IP address management (IPAM)
- Custom route tables
- BGP routing with network appliances
- Internet gateway (inbound and outbound internet access)
- Managed NAT for outbound traffic
- Stateful instance-level firewall rules
- Stateless subnet access control lists
- Block internet access at the account level
- Managed network firewall
- Web application firewall (WAF)
- DDoS protection
- Central firewall and security policy management
- Network peering
- Hub-and-spoke transit routing
- Policy-defined global WAN
- Site-to-site IPsec VPN
- Remote-access (client) VPN
- Dedicated private connection to the cloud
- Private circuits spanning regions and sites
- Private endpoints for cloud and partner services
- Free backbone access to storage services
- Service-to-service application networking
- Public authoritative DNS hosting
- Private DNS zones
- Hybrid DNS resolution
- DNS query filtering
- DNS-based traffic routing and failover
- Layer 7 (HTTP/HTTPS) load balancing
- Layer 4 (TCP/UDP) load balancing
- Transparent load balancing for network appliances
- Content delivery network (CDN)
- Lightweight edge request logic
- Full serverless functions at the CDN edge
- Global anycast entry point for TCP/UDP apps
- Network flow logs
- Network path and access analysis
- Packet mirroring
Identity & Security (1)
Microsoft Certified – DevOps Engineer Expert AZ-400
Expert · A new Agentic DevOps Engineer Expert certification (exam AZ-401) is in beta.
Compute (1)
Containers & Serverless (1)
Identity & Security (1)
Microsoft Certified – Azure Developer Associate AZ-204 Retired
Associate · The certification and renewal assessment are retired (the page doesn't give a date). The closest current developer credential is AI-200 (Azure AI Cloud Developer Associate). That's our reading, not an official mapping.
Compute (1)
Containers & Serverless (13)
- Serverless functions (FaaS)
- Cold-start mitigation for functions
- Built-in HTTPS endpoint for a function
- Functions on dedicated or reserved instances
- Visual workflow orchestration
- Durable workflows written as code
- Serverless scheduler
- Event bus and event routing
- Message queues
- Pub/sub fan-out and notifications
- Managed API gateway
- Managed GraphQL and real-time pub/sub APIs
- Static and SSR web hosting with Git CI/CD
Microsoft Certified – Azure Security Engineer Associate AZ-500 Retired
Associate · Certification, exam, and renewal retired on Aug 31, 2026. See SC-500 (Cloud and AI Security Engineer Associate).
No comparisons mapped to this exam.
Microsoft Certified – Cloud and AI Security Engineer Associate SC-500
Associate · New certification. A practice assessment isn't available yet, which the page says usually means the exam recently left (or is in) beta.
Compute (3)
Containers & Serverless (1)
Storage (2)
- Object storage access control and temporary sharing links
- Immutable and isolated backup vaults (ransomware protection)
Networking & Content Delivery (7)
- Stateful instance-level firewall rules
- Block internet access at the account level
- Managed network firewall
- Web application firewall (WAF)
- DDoS protection
- Central firewall and security policy management
- DNS query filtering
Identity & Security (14)
- Cloud identity and access management
- Credential-free identities for cloud workloads
- Just-in-time privileged access
- Organization-wide guardrail policies
- API and control-plane audit logs
- Compliance assessments and audit evidence
- Managed encryption keys
- Single-tenant HSMs under your control
- Secrets storage and rotation
- Managed private certificate authority
- Managed threat detection
- Cloud security posture management (CSPM)
- Vulnerability scanning for servers, containers, and functions
- Sensitive data discovery
Microsoft Certified – Identity and Access Administrator Associate SC-300
Associate · English version will be updated on Oct 28, 2026.
Identity & Security (9)
- Cloud identity and access management
- Workforce single sign-on and MFA
- Federation for workloads outside the cloud
- Just-in-time privileged access
- Find excessive, unused, or external access
- Customer identity and access management (CIAM)
- Managed Active Directory
- Fine-grained authorization for your own apps
- Zero trust access to private apps (VPN replacement)
Microsoft Certified – Security Operations Analyst Associate SC-200
Associate
Identity & Security (3)
Microsoft Certified – Cybersecurity Architect Expert SC-100
Expert · English version updated Oct 21, 2026.
Identity & Security (2)
Microsoft Certified – Security, Compliance, and Identity Fundamentals SC-900
Fundamentals
Identity & Security (1)
Microsoft Certified – Azure Database Administrator Associate DP-300
Associate · English version will be updated on Oct 27, 2026.
Databases (8)
- Managed Microsoft SQL Server
- SQL Server (or Oracle) with OS-level control
- Serverless relational database (autoscale and pause)
- Run SQL Server apps on PostgreSQL
- In-region high availability with automatic failover
- Cross-region relational disaster recovery
- Tamper-evident ledger data
- Database migration and continuous replication
Microsoft Certified – Azure Cosmos DB AI Developer Associate DP-420
Associate · Renamed from Azure Cosmos DB Developer Specialty and moved to Associate level on Oct 6, 2026.
Databases (7)