AWS, Azure, GCP, and when smaller clouds fit. Compare identity, data gravity, and cost the way engineering teams actually decide.
Choosing a cloud platform is less about picking a winner in a horse race and more about matching services, contracts, and team skills to where your software actually runs. The three hyperscalers—AWS, Microsoft Azure, and Google Cloud—dominate English-language search on “cloud platforms,” but developer experience diverges sharply once you leave “a Linux VM and a load balancer.”
What “cloud platform” means in 2026
At minimum, a platform offers:
- Compute — VMs, containers, serverless functions
- Storage — object, block, file
- Networking — VPCs, DNS, CDNs, private links
- Identity — IAM, SSO federation, secrets
- Managed data — relational, NoSQL, warehouses, caches
Most teams also care about regional presence, compliance attestations, and egress pricing—topics that marketing pages gloss over.
AWS: breadth first
Amazon Web Services remains the default for teams that want the longest menu of mature services. Strengths:
- Deepest catalog (from S3 and EC2 to specialized ML and mainframe connectors)
- Largest third-party integration ecosystem
- Fine-grained IAM (powerful once you learn it)
Friction points newcomers hit:
- IAM policies and service-linked roles feel verbose
- Console UX is service-centric, not workflow-centric
- Bills need tagging discipline from day one
Good fit: startups planning multi-service architectures, enterprises with existing AWS Enterprise Discount Programs, teams already standardized on Terraform modules targeting AWS.
Microsoft Azure: enterprise identity lane
Azure wins when Active Directory / Entra ID is already the identity spine. Strengths:
- Hybrid cloud and on-prem integration (ExpressRoute, Arc)
- Strong Windows/.NET and Microsoft 365 adjacency
- Compliance packaging for regulated industries
Watch-outs:
- Service naming and portal navigation confuse cross-cloud engineers
- Some PaaS offerings lag AWS/GCP in niche areas (varies by region)
Good fit: organizations standardized on Microsoft stacks, .NET-heavy shops, IT departments managing hybrid estates.
Google Cloud: data and Kubernetes culture
Google Cloud Platform (GCP) leans into data analytics, Kubernetes (GKE), and networking sophistication. Strengths:
- BigQuery and data pipeline tooling
- GKE and autoscaling patterns inherited from Google’s internal SRE culture
- Competitive sustained-use and committed-use discounts when negotiated
Watch-outs:
- Smaller marketplace than AWS
- Fewer “every possible service” options; you may integrate third parties
Good fit: data platforms, ML teams using Vertex, companies all-in on Kubernetes without wanting to operate every control plane detail themselves.
Smaller and specialized platforms
Searchers sometimes mean more than the big three:
| Provider | Positioning |
|---|---|
| Oracle Cloud (OCI) | Oracle DB workloads, aggressive core pricing |
| DigitalOcean / Linode / Hetzner | Simpler VPS and managed Kubernetes for SMBs |
| Cloudflare | Edge compute, Workers, security-first networking |
| Vercel / Netlify | Frontend and Jamstack deployment, not full IaaS |
Calling Cloudflare or Vercel a “cloud platform” is fair in the edge/hosting sense, but they are not drop-in replacements for a full VPC migration.
Comparison axes that matter more than logos
1. Data gravity
If your warehouse, streams, and ML features live in one vendor, egress to another cloud is a recurring tax. Pick where primary data lands first; compute can follow.
2. Operational model
- Serverless-first teams favor functions + managed SQL + event buses.
- Kubernetes-first teams compare GKE, EKS, and AKS on control plane cost, upgrade cadence, and add-on ecosystem.
- VM-first teams still exist—compare instance families, live migration, and spot/preemptible markets.
3. Identity and governance
Map how human users and CI pipelines assume roles. Azure shines with Entra; AWS Organizations + SSO; GCP Workforce/Workload Identity Federation. Multi-cloud usually means federated identity, not duplicated user databases.
4. Support and procurement
Enterprise agreements, credits for startups (all three have programs), and regional support response times can outweigh a 5% compute price delta.
A pragmatic selection workflow
- Inventory workloads — latency-sensitive APIs, batch ETL, desktop VDI, static sites.
- List non-negotiables — regions, certifications (HIPAA BAA, FedRAMP), data residency.
- Run a two-week spike — deploy the same containerized service on two finalists; measure deploy time, observability, and incident debugging.
- Model cost with realistic egress — use each vendor’s calculator with cross-AZ and internet egress assumptions, not just vCPU hours.
- Decide exit strategy — even a light “how we’d leave” doc prevents lock-in surprises.
Avoid choosing purely from a Gartner quadrant slide; your team’s existing skills dominate year-one velocity.
Multi-cloud: when and how
True multi-cloud (same app portable across two IaaS vendors) is expensive. More common patterns:
- Primary + DR in a second cloud
- Acquisition leaves you with two estates temporarily
- Best-of-breed SaaS (Snowflake, Datadog) spanning clouds
If you are a 15-person product team, one primary cloud plus IaC (Terraform, OpenTofu, Pulumi) usually beats active-active multi-cloud.
Migration and portability tactics
- Containerize stateless tiers; keep state in managed services knowingly.
- Use open interfaces (S3-compatible APIs, Postgres, Kafka) where feasible.
- Abstract only what you will actually migrate—over-abstraction delays shipping.
FAQ
Which cloud platform is best for beginners?
DigitalOcean or a single AWS account with AWS Activate credits and guardrails (SCPs, billing alarms) is a common learning path—not because AWS is simplest, but because tutorials and jobs assume it.
Are cloud platforms the same as SaaS?
No. Gmail is SaaS; GCP is a platform you build on. Overlap exists (managed databases are SaaS-like).
How often should we re-evaluate?
Major triggers: pricing model changes, new regions you need, compliance scope changes, or team skill shifts—not annual logo churn.
Do “cloud platforms” include AI APIs?
Today, yes in practice. Each hyperscaler bundles model APIs (Bedrock, Azure OpenAI, Vertex AI). Treat them as add-on SKUs with separate data processing terms.
Regional and compliance checklist
Before shortlisting vendors, fill a one-page table:
- Required countries for data storage and processing
- Whether keys must stay customer-managed (BYOK/KMS integrations)
- Industry frameworks: SOC 2 Type II is table stakes; HIPAA, PCI, ISO 27017/18, FedRAMP High narrow the field
- Disaster recovery RPO/RTO targets vs managed backup offerings
AWS, Azure, and GCP all publish region lists and compliance matrices, but service availability in a region is not uniform—check whether your specific database engine exists where you need it.
FinOps habits that survive vendor choice
- Tag every resource at creation (
env,team,service); enforce with policy-as-code. - Set budget alerts at 50/80/100% of forecast; anomaly detection for sudden egress spikes.
- Use reserved capacity / savings plans only after 60–90 days of stable baseline—otherwise you pre-pay for guesswork.
- Review idle resources monthly (orphaned volumes, old snapshots, forgotten load balancers).
Cloud choice does not fix undisciplined architecture; it only changes the invoice layout.
Greenfield vs brownfield
Greenfield teams should optimize for developer speed: managed containers, one IaC repo, one observability stack.
Brownfield migrations benefit from 6 Rs framing (rehost, replatform, refactor, repurchase, retire, retain). Lift-and-shift to VMs is fast but carries old inefficiencies; replatforming one stateless service at a time onto managed runtimes often pays back faster than a big-bang rewrite.
Sample decision matrix (illustrative)
| Workload | Lean AWS | Lean Azure | Lean GCP |
|---|---|---|---|
| .NET monolith on Windows | Secondary | Primary | Rare |
| Kubernetes data plane | Strong (EKS) | Strong (AKS) | Strong (GKE) |
| Petabyte analytics | Redshift / ecosystem | Synapse | BigQuery |
| Global CDN + WAF | CloudFront | Azure Front Door | Cloud CDN / third party |
Your matrix should use your traffic patterns, not this table.
Learning path for engineers new to “cloud platforms”
- IAM roles vs users, and how CI assumes roles without long-lived keys.
- One VPC design: public subnets for ingress, private for data, NAT costs understood.
- Deploy a container with health checks, autoscaling, and centralized logs.
- Break something on purpose in a sandbox account and practice incident steps.
Courses and certifications (Solutions Architect, Azure Administrator, GCP Associate) help vocabulary; building one end-to-end service helps judgment.
The right cloud platform is the one your team can operate safely while shipping product. Compare services against concrete workloads, run a time-boxed proof of concept, and write down identity and egress assumptions before you sign—those details age better than a feature checklist copied from a vendor blog.
Comments
Loading comments…