Google Cloud → AWS and Azure
AWS and Azure equivalents of Identity-Aware Proxy TCP forwarding
The closest AWS equivalents of Google Cloud Identity-Aware Proxy TCP forwarding are AWS Systems Manager Session Manager and EC2 Instance Connect Endpoint; on Azure, Azure Bastion.
About Identity-Aware Proxy TCP forwarding
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Tunnels SSH, RDP, and other TCP traffic to VMs through IAP after an IAM check, so VMs don't need external IP addresses. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Secure remote access to VMs | AWS Systems Manager Session Manager, EC2 Instance Connect Endpoint | Direct match | Azure Bastion |
Secure remote access to VMs Direct match
Session Manager and EC2 Instance Connect Endpoint map to Identity-Aware Proxy TCP forwarding (SSH and RDP without external IPs) combined with OS Login (IAM-managed SSH access).
- IAP tunnels raw TCP after an IAM check; there is no agent-based shell like Session Manager.
- OS Login ties Linux accounts to Google identities and IAM roles instead of per-instance keys.