Google Cloud → AWS and Azure
AWS and Azure equivalents of Sensitive Data Protection (formerly Cloud DLP)
The closest AWS equivalents of Google Cloud Sensitive Data Protection (formerly Cloud DLP) are Amazon Macie, Amazon Comprehend and Amazon Bedrock Guardrails; on Azure, Microsoft Purview (data classification and DSPM), Azure Language and Foundry guardrails (content filters).
About Sensitive Data Protection (formerly Cloud DLP)
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | Discovers, classifies, and de-identifies sensitive data (PII and more) in text, images, and Google Cloud storage. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (2)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Sensitive data discovery | Amazon Macie | Direct match | Microsoft Purview (data classification and DSPM) |
| PII detection & redaction in text | Amazon Comprehend, Amazon Bedrock Guardrails | Direct match | Azure Language, Foundry guardrails (content filters) |
Sensitive data discovery Direct match
Amazon Macie maps to Sensitive Data Protection discovery, which profiles data across BigQuery, Cloud Storage, and other sources to find sensitive data.
- Sensitive Data Protection also inspects and de-identifies data, beyond Macie's discovery.
PII detection & redaction in text Direct match
Comprehend PII detection maps to Sensitive Data Protection (formerly Cloud DLP), which finds, classifies, and de-identifies sensitive data.
- Sensitive Data Protection also scans BigQuery, Cloud Storage, and Cloud SQL, which Comprehend does not (Amazon Macie covers S3).