Skip to content

Cloud service map

Every cloud provider offers the same building blocks under different names. Search by capability or by any service name to find its equivalents. The last column lists an open-source or portable option you can run anywhere, which is useful when you want to limit lock-in.

46 capabilities

CapabilityAWSAzureGoogle CloudOpen source or portable
Compute
Virtual machinesAmazon EC2Azure Virtual MachinesCompute EngineOpenStack, KVM
Managed KubernetesAmazon EKSAzure Kubernetes Service (AKS)Google Kubernetes Engine (GKE)Kubernetes
Serverless containersAWS Fargate (with ECS or EKS)Azure Container AppsCloud RunKnative
FunctionsAWS LambdaAzure FunctionsCloud Run functions (formerly Cloud Functions)Knative, OpenFaaS
Container registryAmazon ECRAzure Container RegistryArtifact RegistryHarbor
Storage
Object storageAmazon S3Azure Blob StorageCloud StorageCeph, SeaweedFS
Block storageAmazon EBSAzure Managed DisksPersistent Disk, HyperdiskCeph
Shared file storageAmazon EFS, Amazon FSxAzure FilesFilestoreNFS, CephFS
Archive storageAmazon S3 Glacier storage classesBlob Storage archive tierCloud Storage Archive class—
Databases
Managed PostgreSQL and MySQLAmazon RDS, Amazon AuroraAzure Database for PostgreSQL, Azure Database for MySQLCloud SQL, AlloyDB for PostgreSQLPostgreSQL, MySQL
Document and key-value NoSQLAmazon DynamoDB, Amazon DocumentDBAzure Cosmos DBFirestoreMongoDB
Wide-column NoSQLAmazon KeyspacesAzure Managed Instance for Apache CassandraBigtableApache Cassandra, ScyllaDB
Globally distributed SQLAzure has no direct equivalent; Cosmos DB is the usual choice for multi-region writes.Amazon Aurora DSQL—SpannerCockroachDB, YugabyteDB
In-memory cacheAzure Cache for Redis is being retired in favor of Azure Managed Redis.Amazon ElastiCache, Amazon MemoryDBAzure Managed RedisMemorystoreValkey, Redis
Graph databaseAmazon NeptuneAzure Cosmos DB for Apache GremlinSpanner GraphNeo4j, JanusGraph
Vector searchAmazon OpenSearch Service, Aurora PostgreSQL with pgvectorAzure AI Search, Azure Database for PostgreSQL with pgvectorVector Search on Gemini Enterprise Agent Platform, AlloyDB with pgvectorpgvector, OpenSearch
Data and analytics
Data warehouseAmazon RedshiftMicrosoft Fabric Data WarehouseBigQueryClickHouse
Managed SparkAmazon EMR, AWS GlueAzure Databricks, Microsoft FabricDataprocApache Spark
Lakehouse table catalogAWS Glue Data Catalog, Amazon S3 TablesUnity Catalog (Azure Databricks), OneLake (Microsoft Fabric)BigLake metastoreApache Polaris, Nessie
SQL on the data lakeAmazon AthenaDatabricks SQL, Microsoft FabricBigQuery with BigLake tablesTrino
Kafka-compatible event streamingAmazon MSKAzure Event Hubs (Kafka protocol)Managed Service for Apache KafkaApache Kafka
Stream processingAmazon Managed Service for Apache FlinkAzure Stream AnalyticsDataflowApache Flink, Apache Beam
Data pipeline orchestrationAmazon MWAA (managed Airflow)Azure Data FactoryCloud Composer (managed Airflow)Apache Airflow, Dagster
Business intelligenceAmazon Quick Sight (formerly QuickSight)Power BILookerApache Superset
Integration
Message queueAmazon SQSAzure Service Bus queuesPub/Sub, Cloud TasksRabbitMQ
Publish/subscribe and event routingAmazon SNS, Amazon EventBridgeService Bus topics, Azure Event GridPub/Sub, EventarcRabbitMQ, NATS
API gatewayAmazon API GatewayAzure API ManagementApigee, API GatewayKong
Workflow orchestrationAWS Step FunctionsAzure Logic Apps, Durable FunctionsWorkflowsTemporal
Networking
Content delivery networkAmazon CloudFrontAzure Front DoorCloud CDN—
DNSAmazon Route 53Azure DNSCloud DNSCoreDNS
Load balancingElastic Load BalancingAzure Load Balancer, Application GatewayCloud Load BalancingNGINX, Envoy
Private connection to your data centerAWS Direct ConnectAzure ExpressRouteCloud Interconnect—
Service-to-service networkingAWS App Mesh is being discontinued; AWS recommends VPC Lattice or ECS Service Connect.Amazon VPC Lattice, ECS Service ConnectIstio-based service mesh add-on for AKSCloud Service MeshIstio, Linkerd
Security and identity
Employee identity and single sign-onAWS IAM Identity CenterMicrosoft Entra IDCloud IdentityKeycloak
Customer sign-inAmazon CognitoMicrosoft Entra External IDIdentity PlatformKeycloak
Permissions on cloud resourcesAWS IAMAzure role-based access controlIAM—
SecretsAWS Secrets ManagerAzure Key VaultSecret ManagerHashiCorp Vault, OpenBao
Encryption keysAWS KMSAzure Key Vault, Managed HSMCloud KMS—
Web application firewallAWS WAFAzure Web Application FirewallCloud ArmorCoraza, ModSecurity
Threat detectionAmazon GuardDutyMicrosoft Defender for CloudSecurity Command CenterFalco
Observability
Metrics, logs and alertsAmazon CloudWatchAzure MonitorCloud Monitoring, Cloud LoggingPrometheus, Grafana, OpenSearch
Distributed tracingAWS is ending support for the X-Ray SDKs and daemon and recommends OpenTelemetry for instrumentation.AWS X-Ray (with OpenTelemetry)Application InsightsCloud TraceOpenTelemetry, Jaeger
Delivery
Infrastructure as codeAWS CloudFormation, AWS CDKBicep, Azure Resource ManagerInfrastructure ManagerTerraform, OpenTofu, Pulumi
Build and deployment pipelinesAWS CodeBuild, AWS CodePipelineAzure PipelinesCloud Build, Cloud DeployJenkins, Tekton, Argo CD
AI and machine learning
Foundation models through an APIMicrosoft renamed Azure AI Foundry to Microsoft Foundry in 2025; Google renamed Vertex AI in 2026.Amazon BedrockMicrosoft Foundry (including Azure OpenAI)Gemini Enterprise Agent Platform (formerly Vertex AI)Ollama, vLLM
Machine learning platformAmazon SageMaker AIAzure Machine LearningGemini Enterprise Agent PlatformKubeflow, MLflow

Names last checked: November 2026.


To see these services in context, read the cloud mapping sections of the microservices, RAG and lakehouse reference architectures.

Written and edited by Abhinav Taduka, enterprise software architect.