All posts
Migration

Migrating from Azure to AWS in 2026: The Service Map, What Stays, and the Order That Works

By

October 25, 2026

8 min read

A practical map from Azure services to AWS equivalents (App Service, Functions, AKS, Azure SQL, Cosmos DB, Service Bus, Key Vault, Azure OpenAI), what usually stays on Microsoft (Entra ID, Microsoft 365, Power BI), how egress is handled, and a migration order that avoids running two half-finished platforms.

Azure
Migration
Cloud Migration
Multi-Cloud
AWS

Companies move from Azure to AWS for the usual reasons: an acquisition, a team that knows AWS better, a product that needs AWS services, or consolidation onto one cloud. The move is rarely all of Microsoft. Identity, email and productivity usually stay, and the migration is about the application platform.

The service map

Azure

AWS

Notes

App Service

ECS (including Express Mode), Elastic Beanstalk, or Amplify for front ends

Containerize if you can; it makes the next move easier too

Azure Functions

Lambda

.NET in-process functions need rework anyway: that model lost support on November 10, 2026

AKS

EKS

Manifests move; ingress, identity and storage classes change

Azure SQL Database / Managed Instance

RDS for SQL Server, or Aurora PostgreSQL with Babelfish

Licensing differs; check edition

Cosmos DB

DynamoDB, or DocumentDB for the MongoDB API

Data model and consistency settings need review

Blob Storage / Azure Files

S3 / FSx for Windows File Server or EFS

Service Bus / Event Grid / Event Hubs

SQS and SNS or Amazon MQ / EventBridge / Kinesis or MSK

Key Vault

Secrets Manager and KMS

Front Door / Application Gateway

CloudFront / ALB with AWS WAF

Logic Apps / Data Factory

Step Functions and EventBridge / Glue

Rebuild rather than translate

Azure OpenAI

Amazon Bedrock

OpenAI models are generally available on Bedrock since June 2026, alongside Claude

Azure Monitor / Application Insights

CloudWatch and X-Ray, or your existing APM

Want a second opinion on this for your system?

Book a free 30-minute call. You'll leave knowing what we'd do first and roughly what it costs, whether or not you hire us.

What usually stays

  • Entra ID as the identity provider. Federate it to IAM Identity Center for AWS access, with SCIM provisioning, so people keep one login.

  • Microsoft 365, Teams and SharePoint Online.

  • Power BI, which connects to Redshift, Athena and RDS.

  • Azure DevOps, if teams are happy with it; pipelines can deploy to AWS with OIDC. Or move to GitHub when convenient.

Data transfer and funding

Since 2024 Microsoft and AWS have both offered to waive data transfer charges for customers moving their data off their clouds, on request and subject to conditions. Ask before moving large datasets. AWS also funds qualifying migrations through the Migration Acceleration Program, with credits for assessment and migration work.

Order of work

  1. Build the AWS landing zone with Entra ID federated, networking (including a private link between the clouds for the transition) and logging.

  2. Move stateless services first, pointing at Azure data over the private link if needed.

  3. Move each database with its applications, using DMS for replication and a short cutover window.

  4. Move integrations and pipelines last, rebuilt against the new services.

  5. Shut Azure subscriptions down per application as each finishes, so you never pay for two full platforms for long.

hoolco Monthly Review

Once a month: what changed in tech that month and what it means for you, from cloud and AI to security and the tools you build with. Every item links to its source. No sales pitch, unsubscribe in one click.

As of October 25, 2026. Provided as is, for general information, and accurate to the best of our knowledge on the date shown. Not legal, compliance, tax, financial or other professional advice. Prices, limits and vendor services change; check current vendor documentation before relying on anything here. Terms of use.