Google Cloud → AWS and Azure
AWS and Azure equivalents of Virtual Private Cloud (VPC) network
The closest AWS equivalents of Google Cloud Virtual Private Cloud (VPC) network are Amazon VPC, VPC subnets and Internet gateway (and egress-only internet gateway); on Azure, Azure Virtual Network, Public IP addresses and prefixes and Private subnets (default outbound access off).
About Virtual Private Cloud (VPC) network
| Provider | Google Cloud |
|---|---|
| Status | Generally available |
| What it is | A global virtual network with regional subnets, firewall rules, and routes, shared across projects with Shared VPC. |
| Documentation | docs.cloud.google.com |
| Pricing | Official pricing page |
Mappings (3)
| Capability | AWS | Match (GCP vs AWS) | Azure |
|---|---|---|---|
| Private virtual network | Amazon VPC | Direct match | Azure Virtual Network |
| Subnets and availability zone placement | VPC subnets | Partial match | Azure Virtual Network |
| Internet gateway (inbound and outbound internet access) | Internet gateway (and egress-only internet gateway) | Partial match | Public IP addresses and prefixes, Private subnets (default outbound access off) |
Private virtual network Direct match
Amazon VPC maps to a Google Cloud VPC network. A VPC network is global, and its subnets are regional.
- One VPC network spans all regions; an AWS VPC is regional.
- Shared VPC lets a host project share its network with service projects, similar to AWS VPC sharing.
Subnets and availability zone placement Partial match
VPC subnets map to Google Cloud subnets, but Google Cloud subnets are regional and span every zone in the region; you choose the zone per VM, not per subnet.
- A single subnet serves all zones in its region, unlike AWS subnets, which live in one Availability Zone.
- Subnets can have secondary ranges (used by GKE for Pods and Services).
Internet gateway (inbound and outbound internet access) Partial match
There is no internet gateway resource. Every VPC network has a default route to the default internet gateway; VMs with external IP addresses use it directly, and private VMs use Cloud NAT.
- Internet access is controlled by routes, firewall rules, and whether a VM has an external IP.
- IPv6 egress uses the same default route; there is no egress-only gateway resource.