On-premises to Cloud Mapping

ON-PREMISES AWS AZURE GOOGLE ORACLE IBM ALIBABA Firewall & ACLs Security Groups

—

AWS Network ACLs Network Security Groups
(NSG) Cloud Armor

—

VPC Firewall VCN Security Lists Cloud Security Groups NAT Gateway IPS/IDS 3rd Party Only 3rd Party Only 3rd Party Only 3rd Party Only 3rd Party Only Anti-Bot Service

—

Website Threat Inspector Web Application Firewall
(WAF) AWS WAF

—

AWS Firewall Manager Application Gateway Cloud Armor Oracle Dyn WAF Cloud Internet Services Web Application Firewall SIEM &
Log Analytics AWS Security Hub

—

Amazon GuardDuty Azure Sentinel

—

Azure Monitor Stackdriver Monitoring

—

Stackdriver Logging Oracle Security Monitoring and Analytics IBM Log Analysis

—

Cloud Activity Tracker ActionTrail Antimalware 3rd Party Only Microsoft Antimalware

—

Azure Security Center 3rd Party Only 3rd Party Only 3rd Party Only Server Guard Data Loss Prevention
(DLP) Amazon Macie Information Protection
(AIP) Cloud Data Loss Prevention API 3rd Party Only 3rd Party Only Web Application Firewall Key Management Key Management Service KMS) Key Vault Cloud Key Management Service Cloud Infrastructure Key Management Key Protect

—

Cloud Security Key Management Service Encryption At Rest EBS/EFS Volume Encryption

—

S3 SSE Storage Encryption for Data at Rest Part of Google Cloud Platform Cloud Infrastructure Block Volume Hyper Protect Crypto Services Object Storage Service DDoS Protection AWS Shield Built-in DDoS defense Cloud Armor Built-in DDoS defense Cloud Internet Services Anti-DDoS Email Protection 3rd Party Only Office Advanced Threat Protection Various controls embeded in G-Suite 3rd Party Only 3rd Party Only 3rd Party Only SSL Decryption
Reverse Proxy Application Load Balancer Application Gateway HTTPS Load Balancing 3rd Party Only Cloud Load Balancer Server Load Balancer (SLB) Endpoint Protection 3rd Party Only Microsoft Defender ATP 3rd Party Only 3rd Party Only 3rd Party Only Server Guard Certificate Management AWS Certificate Manager Key Vault 3rd Party Only 3rd Party Only Certificate Manager Cloud SSL Certificates Service Container Security Amazon EC2 Container Service (ECS) Azure Container Service (ACS) Kubernetes Engine Oracle Container Services Containers – Trusted Compute Container Registry Identity and Access Management Identity and Access Management (IAM) Azure Active Directory Cloud Identity

—

Cloud IAM Oracle Cloud Infrastructure IAM Cloud IAM

—

App ID Resource Access Management Privileged Access Management (PAM) 3rd Party Only Azure AD Privileged Identity Management 3rd Party Only 3rd Party Only 3rd Party Only 3rd Party Only Multi-Factor Authentication AWS MFA (part of AWS IAM) Azure Active Directory Security Key Enforcement Oracle Cloud Infrastructure IAM App ID Resource Access Management Centralized Logging
—
Auditing CloudWatch

—

S3 Bucket Logging Azure Audit Logs VPC Flow Logs

—

Access Transparency Oracle Cloud Infrastructure Audit Log Analysis with LogDNA Log Service Load Balancer Application Load Balancer

—

Classic Load Balancer Azure Load Balancer Cloud Load Balancing

—

HTTPS Load Balancing Cloud Infrastructure Load Balancing Cloud Load Balancer Server Load Balancer LAN Virtual Private Cloud (VPC) Virtual Network Virtual Private Cloud Network Virtual Cloud Network (VCN) VLANs Virtual Private Cloud (VPC) WAN Direct Connect ExpressRoute Dedicated Interconnect FastConnect Direct Link VPN Gateway

—

Express Connect VPN VPC Customer Gateway

—

AWS Transit Gateway Virtual Network

—

SSTP Google VPN Dynamic Routing

—

Gateway (DRG) IPSec VPN

—

Secure Gateway VPN Gateway Governance Risk and Compliance Monitoring AWS CloudTrail

—

AWS Compliance Center Azure Policy Cloud Security Command Center 3rd Party Only 3rd Party Only ActionTrail Backup and Recovery AWS Backup

—

Amazon S3 Glacier Azure Backup

—

Azure Site Recovery Object Versioning

—

Cloud Storage Nearline Archive Storage IBM Cloud Backup Hybrid Backup Recovery Vulnerability Assessment Amazon Inspector

—

AWS Trusted Advisor Azure Security Center Cloud Security Scanner Security Vulnerability Assessment Service Cloud Security Advisor

—

Vulnerability Advisor Server Guard

—

Website Threat Inspector Patch Management AWS Systems Manager Update Management 3rd Party Only IBM Cloud Orchestrator 3rd Party Only 3rd Party Only Change Management AWS Config Azure Automation (Change Tracking) 3rd Party Only 3rd Party Only 3rd Party Only Application Configuration Management (ACM)