AWS Config vs. Azure Arc

To keep track of changes and to answer many compliance issues this is a life-saver. AWS does a good job providing tools like this. Any AWS workload should be monitored with AWS Config. It even is great for troubleshooting and seeing who changed what at what time.

Incentivized

I have been amazed by the extra options which Azure Arc offers for SQL server deployment in both Azure infrastructure and on-premise (hybrid) infrastructure. The deployment options range from Infrastructure as a service (IaaS) to Platform as a service (PaaS). Arc-enabled IaaS and PaaS services bring the integration of Azure monitoring and security tools into any customer's local infrastructure and this is amazing

Incentivized

• It can help you define rules for provisioning and configuring of your AWS. We use it for this purpose.
• It maintains configuration history. So you can use the AWS Management Console, API, or CLI to obtain details of past configurations
• It gives you a configuration snapshot of all of your AWS resources and you can store it in AWS S3.
• You can integrate it with AWS CloudTrail to correlate configuration changes to particular events in your account.

Incentivized

• Azure Monitor metrics
• Event logs aggregation
• Integration with Windows Admin Center

Incentivized

• Vendor lock-in, no easy migration path for example if you want to move some workloads to Azure, you'd not be able to lift and shift.
• Only at an AWS resource perspective - cannot do desired state configuration at an OS level (which makes sense but be good if you could even as a separate feature within AWS Config).

Incentivized

• Licensing benefits could use some improvement
• Update management pricing
• Security optimization and pricing

Incentivized

Azure Arc monitoring is based on a unified procedure which includes the installation and configuration of the Arc agent on any computer/server which is to be onboaded to Arc. The solution is very usable especially when combined with the usage of Windows Admin Center, the HTML5-based unified management console for all our hybrid infrastructure. Many of the best of breed Azure tools and services are available via Azure Arc, when deployed to on-premise servers.

Incentivized

The performance has never been an issue for us, the dashboard gives us real-time monitoring and the alert sends us the notification within less than a minute of it happening, this applies to all of the monitored resources on AWS. However we can't (or probably haven't figured out how to) integrate with any other third party services, so we can't really evaluate how it integrates with other services

Incentivized

Despite the comparison it is not really apples to apples, the main purpose of the service is quite similar which is to monitor your application or services. In terms of AWS services, AWS Config provides more options to monitor and log your service on the infrastructure level which is very useful on that level and overall will give you more information about what is currently happening. Meanwhile PaperTrail is more suited to monitor and log your service and could only give you information on the application level.

Incentivized

Azure Arc uses the underlying power of Microsoft Azure, which allows assets across multicloud to be onboarded to Arc platform. It provides monitoring, security, updates in one click in one single platform. It also provides licensing benefits for Windows Server licenses, which offers premium features like Windows server admin center to manage your windows servers more effectively.

Incentivized

• Enforcing audit requirements
• Easy to set up alerting when there are rule breaches
• Auto remediation reduces the manual policing of such breaches

Incentivized

• It reduces asset management processes
• Provides centralized monitoring
• Provides security posture across multi cloud environment
• Multi Cloud Management

Incentivized