2. On Premises와 클라우드 비교

1. AWS vs Azure 구성도

같은 구성도를 AWS와 Azure로 표현해 놓은 것입니다.

2. On-Premises vs AWS vs Azure vs Google

On-premises	AWS	Azure	Google
Stateful Firewall	Security Groups AWS Network ACLs	Network Security Groups (NSG)	Cloud Armor VPC Firewall
IDS/DS/HIPS	3rd Party Only
WAF	AWS WAF	Application Gateway	Cloud Armor
SIEM Log Analytics	AWS CloudTrail Amazon Guard duty	Log Analytics (OMS)	Stackdriver Logging
Antimalware	3rd Party Only	Microsoft Antimalware/ Azure Security Center	Cloud Security Scanner
Privileged Access Management (PAM)	3rd Party Only
Data Loss Prevention (DLP)	Amazon Macie	Information Protection (AIP)	Cloud Data Loss Prevention API
Vulnerability Assessment	Amazon Inspector AWS Trusted Advisor	Azure Security Center	Cloud Security Scanner
Email Protection	3rd Party Only	Information Protection Office 365	Various controis embedded in G-suite
Web/URL Filtering	3rd Party Only
SSL Decryption Reverse Proxy	Elastic Load Balancer	Application Gateway	HTTPS Load Balancing
VPN	Virtual Private Cloud (VPC)	Virtual Network SSTP	Google VPN
Key Management	Key Management Service (KMS)	Key Vault	Cloud Key Management Service
Encryption at Rest	Elastic Block Storage	Storage Encryption for Data at Rest	Part of Google Cloud Platform
DDoS	AWS Shield	Built-in DDoS defense	Cloud Armor
Identity and Access Authentication	AWS MFA	Azure Active Directory	Security Key Enforcement
Centralize Logging	Cloud watch/ S3 bucket	Azure Audit Logs	VPC Flow Logs Access Transparency
Load Balancer	Elastic Load Balancer/CloudFront	Azure Load Balancer	Cloud Load Balancing HTTPS Load Balancing
LAN	Virtual Private Cloud (VPC)	Virtual Networks	Virtual Private Cloud Network (VPC)
WAN	Direct Connect	ExpressRoute/MPLS	Dedicated interconnect