Google Cloud → AWS and Azure
AWS and Azure equivalents of Organization Policy network constraints
The closest AWS equivalent of Google Cloud Organization Policy network constraints is VPC Block Public Access; on Azure, Private subnets (default outbound access off).
About Organization Policy network constraints
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Organization-wide guardrails such as restricting external IP addresses on VMs or VPC peering. |
| Documentation | docs.cloud.google.com |
| Pricing | No separate pricing page |
Mappings (1)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Block internet access at the account level | VPC Block Public Access | Partial match | Private subnets (default outbound access off) |
Block internet access at the account level Partial match
VPC Block Public Access maps partly to Organization Policy constraints, such as restricting which VMs can have external IP addresses.
- Constraints are preventive guardrails at organization, folder, or project level, not a single network-level switch.
- Combine them with hierarchical firewall policies to block inbound internet traffic.