Identity and Access Management (IAM)

Microsoft Entra ID

Allows users to securely control access to services and resources while offering data security and protection. Create and manage users and groups, and use permissions to allow and deny access to resources.

Identity and Access Management (IAM)

Azure role-based access control (RBAC)

Azure role-based access control (RBAC) helps you manage who has access to Azure resources, what they can do with those resources, and what areas they have access to.

Organizations

Subscription Management + Azure RBAC

Security policy and role management for working with multiple accounts.

Multi-Factor Authentication

Microsoft Entra ID

Safeguard access to data and applications while meeting user demand for a simple sign-in process.

Directory Service

Microsoft Entra Domain Services

Provides managed domain services, such as domain join, group policy, LDAP, and Kerberos/NTLM authentication, which are fully compatible with Windows Server Active Directory.

Cognito

Microsoft Entra External ID

A highly available, global identity management service for consumer-facing applications that scales to hundreds of millions of identities.

AWS Config

Policy

Azure Policy is a service in Azure that you use to create, assign, and manage policies. These policies enforce different rules and effects over your resources so those resources stay compliant with your corporate standards and service-level agreements.

Organizations

Management Groups

Azure management groups provide a level of scope above subscriptions. You organize subscriptions into containers called "management groups" and apply your governance conditions to the management groups. All subscriptions within a management group automatically inherit the conditions applied to the management group. Management groups give you enterprise-grade management at a large scale, no matter what type of subscriptions you have.

Server-side encryption with Amazon S3 Key Management Service

Azure Storage Service Encryption

Helps you protect and safeguard your data and meet your organizational security and compliance commitments.

Key Management Service (KMS), CloudHSM

Key Vault

Provides security solution and works with other services by providing a way to manage, create, and control encryption keys stored in hardware security modules (HSMs).

Web Application Firewall

Web Application Firewall

A firewall that protects web applications from common web exploits.

AWS Network Firewall

Firewall

Provides inbound protection for non-HTTP/S protocols, outbound network-level protection for all ports and protocols, and application-level protection for outbound HTTP/S.

Inspector

Defender for Cloud

An automated security assessment service that improves the security and compliance of applications. Automatically assess applications for vulnerabilities or deviations from best practices.

Certificate Manager

App Service Certificates available on the Portal

Service that allows customers to create, manage, and consume certificates seamlessly in the cloud.

GuardDuty

Microsoft Sentinel

Detect and investigate advanced attacks on-premises and in the cloud.

Artifact

Service Trust Portal

Provides access to audit reports, compliance guides, and trust documents from across cloud services.

Shield

DDoS Protection Service

Provides cloud services with protection from distributed denial of services (DDoS) attacks.