Google Cloud → AWS and Azure
AWS and Azure equivalents of Cloud Next Generation Firewall
The closest AWS equivalent of Google Cloud Cloud Next Generation Firewall is Security groups; on Azure, Network security groups and application security groups.
About Cloud Next Generation Firewall
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Stateful distributed firewall with Essentials, Standard, and Enterprise tiers, VPC firewall rules, and network firewall policies. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Stateful instance-level firewall rules | Security groups | Direct match | Network security groups and application security groups |
Stateful instance-level firewall rules Direct match
Security groups map to Cloud NGFW VPC firewall rules and network firewall policies, which are stateful and target VMs by network tags, secure tags, or service accounts.
- Rules are defined on the VPC network or in firewall policies, not attached to network interfaces.
- Rules support both allow and deny with priorities, unlike security groups.