Sultan's Cloud Shaping

Side-by-side comparisons across Azure, AWS & GCP — built for learning, interview prep, and reference.

Azure AWS GCP
🔒

IAM Foundation

Org Hierarchy & FoldersManagement Groups · OUs · Folders. Policy inheritance, billing boundaries.
Custom IAM RolesScoped permissions. JSON (Azure/AWS) vs YAML/CLI (GCP). Lifecycle stages.
IAM ConditionsABAC — time-bound, IP-restricted, tag-based access. CEL vs JSON vs CA.
Service Accounts + WIFWorkload Identity Federation (OIDC). GitHub Actions to cloud — no secrets.
Deny PoliciesAzure Policy · AWS SCPs · GCP Org Constraints. Preventive guardrails.
VPC Service ControlsData exfiltration perimeters. Service attachments, ingress/egress, dry run.
Policy Analyzer & AuditAudit who can access what. Over-privileged detection. Audit logging.
Project FactoryAutomated project/account provisioning. CFT, Blueprints, Control Tower.
🌐

Networking

Hybrid Networking + VPNConnect on-prem to cloud. VPN, ExpressRoute, Direct Connect, Interconnect.
Private Service ConnectPrivate Link · VPC Endpoints · PSC. Service attachments and routing.
Hybrid DNSCloud DNS · Route 53 · Private Zones. Inbound/outbound forwarding.
⚙

Kubernetes

GKE + MicroservicesAKS / EKS / GKE. Microservice deployment, service mesh, autoscaling.
Helm Package ManagementCharts, releases, rollbacks. OCI registries. Values, templates, hooks.
🚀

DevOps / IaC

Terraform PipelineState backends (GCS/S3/Azure). CI/CD integration. Plan + apply workflows.
CI/CDCloud Build · CodePipeline · Azure DevOps. GitHub Actions with WIF.
SonarQube + CheckovCode quality + IaC security scanning. SAST pipeline. Quality gates.
Ansible AutomationPlaybooks, dynamic inventory, GCP/Azure/AWS modules. Idempotent config.
⚡

APIs & AI/ML

API Gateway (Endpoints)APIM · API Gateway · Cloud Endpoints. Auth, rate limiting, OpenAPI.
Vertex AI + MLOpsSageMaker · AML · Vertex AI. Pipelines, feature store, model deployment.
Gemini + AI StudioGenerative AI. Azure OpenAI · Bedrock · Gemini. Multimodal, fine-tuning.
📈

Observability & Ops

Grafana DashboardsManaged + self-hosted Grafana. CloudWatch/Monitor data sources. Alerts.
Linux DiagnosticsEssential cheat sheet. Azure/AWS/GCP VM troubleshooting commands.