ELK (elastic log stash and kibana) - every event is registered in this service Cloud Watch – monitoring the incidents SNS - simple notification service SQS - simple queue service —- endpoint
EBS – elastic block store aws managed service for block level storage S3 - simple storage service AWS managed service for bucket level storage EFS - Elastic file system - storage for file level
Classifications of Cloud
| Category | AWS | Azure | GCP |
|---|
| VMs | EC2 (Elastic Cloud Computing) | Virtual Machines (VMs) | Compute Engine |
| Autoscaling | Auto Scaling | VM Scale Sets | Managed Instance Groups |
| Bare Metal | EC2 Bare Metal | Azure Bare Metal Instances | Bare Metal Solution |
| HPC | AWS ParallelCluster | Azure CycleCloud | GCP HPC |
| GPU Support | EC2 GPU Instances | NV-series, NC-series | GPU-enabled Compute Engine VMs |
| Category | AWS | Azure | GCP |
|---|
| Object Storage | S3 | Blob Storage | Cloud Storage |
| Block Storage | EBS | Azure Managed Disks | Persistent Disks |
| File Storage | EFS | Azure Files | Filestore |
| Archive Storage | S3 Glacier | Azure Archive Storage | Archive Storage Class |
| Hybrid Storage | AWS Storage Gateway | Azure StorSimple | Transfer Appliance |
| Category | AWS | Azure | GCP |
|---|
| VPC | VPC | Virtual Network (VNet) | VPC Network |
| Load Balancer | Elastic Load Balancing | Azure Load Balancer | Cloud Load Balancing |
| DNS | Route 53 | Azure DNS | Cloud DNS |
| CDN | CloudFront | Azure CDN | Cloud CDN |
| VPN | AWS VPN | Azure VPN Gateway | Cloud VPN |
| Private Network | AWS PrivateLink | Azure Private Link | VPC Peering, Private Service Connect |
| Category | AWS | Azure | GCP |
|---|
| IAM | AWS IAM | Azure Active Directory | IAM |
| Encryption | KMS | Azure Key Vault | Cloud KMS |
| Firewall | Security Groups / NACL | NSG / Azure Firewall | VPC Firewall Rules |
| DDoS Protection | AWS Shield / WAF | Azure DDoS Protection / WAF | Cloud Armor |
| Certificate Mgmt | AWS Certificate Manager (ACM) | Azure App Service Certificates | Google-managed SSL certificates |
| Compliance Tools | AWS Artifact, Config | Azure Policy, Compliance Manager | Assured Workloads, Security Command Center |
| Category | AWS | Azure | GCP |
|---|
| IAM | AWS IAM | Azure Active Directory | IAM |
| Encryption | KMS | Azure Key Vault | Cloud KMS |
| Firewall | Security Groups / NACL | NSG / Azure Firewall | VPC Firewall Rules |
| DDoS Protection | AWS Shield / WAF | Azure DDoS Protection / WAF | Cloud Armor |
| Certificate Mgmt | AWS Certificate Manager (ACM) | Azure App Service Certificates | Google-managed SSL certificates |
| Compliance Tools | AWS Artifact, Config | Azure Policy, Compliance Manager | Assured Workloads, Security Command Center |
| Category | AWS | Azure | GCP |
|---|
| Container Service | ECS | Azure Container Instances | Cloud Run (for containers) |
| Kubernetes | EKS | AKS (Azure Kubernetes Service) | GKE (Google Kubernetes Engine) |
| Container Registry | Amazon ECR | Azure Container Registry | Artifact Registry / Container Registry |
| Service Mesh | App Mesh | Azure Service Mesh (Preview) | Anthos Service Mesh |
| Category | AWS | Azure | GCP |
|---|
| Functions | AWS Lambda | Azure Functions | Cloud Functions |
| Serverless APIs | API Gateway | Azure API Management | API Gateway |
| Serverless DB | Aurora Serverless, DynamoDB | Cosmos DB | Firestore |
| Serverless Containers | Fargate | Azure Container Apps | Cloud Run |
| Event Services | EventBridge, SNS, SQS | Event Grid, Service Bus, Queue | Pub/Sub |
Authentication vs Authorization
Cloud Models
![[Pasted image 20250730115346.png]]
