AWS security groups equivalent in azure

Question

what is the AWS security groups equivalent in azure

if there is any in azure is this only for the PaaS services or also for IaaS ?

Answer 1

According to Amazon EC2 Documentation, a security group is just a single point for firewall settings applied to a given instance:

A security group acts as a firewall that controls the traffic allowed to reach one or more instances. When you launch an instance, you assign it one or more security groups. You add rules to each security group that control traffic for the instance.

In Windows Azure you have to set these rules on a per-instance or per-service basis, there is no way to define some rules and apply them automatically to all instances.

But you can use PowerShell cmdlets for automating this task for your services.

Firewall rules apply mostly for PaaS: for your web/worker role services and for SQL Azure. In case of IaaS there are two sides: your VM with custom software firewall (depending upon your OS etc.) and the endpoints you create and manage in Azure Portal that relay in- and outbound traffic to your VM.