Service map
AWS, Azure and GCP mapped to EU-sovereign equivalents
This is the full mapping our engineers use on the first call. Every hyperscaler capability is graded against the managed, EU-jurisdiction option that actually exists in production today. Not a roadmap, not a private beta. The grades are conservative: when a European equivalent is close but not a drop-in, it is graded down, and no gap is softened to look better. That honesty is the point.
How should you read the verdict scale?
Four stops, from a production-proven equivalent to a genuine gap. The verdict grades the European option, not the hyperscaler. A gap means there is no managed EU-sovereign twin today, not that the category is out of reach.
- Mature Production-proven EU equivalent. Low migration risk.
- Viable Solid equivalent with minor feature deltas.
- Partial Usable, but with real gaps in scale or features.
- Gap No true managed EU-sovereign equivalent. Expect to self-host or reduce scope.
| Capability | Hyperscaler | EU-sovereign path | Verdict |
|---|---|---|---|
| Object storage | Amazon S3 Azure Blob Storage Google Cloud Storage | Scaleway Object StorageOVHcloud Object Storage S3-compatible API. A drop-in target for most SDKs, backups and static assets. | Mature |
| Block storage | Amazon EBS Azure Managed Disks Persistent Disk / Hyperdisk | Scaleway Block StorageOVHcloud Block Storage Network block volumes with snapshots. Standard building block, well covered. | Mature |
| Virtual machines | Amazon EC2 Azure Virtual Machines Google Compute Engine | Scaleway InstancesOVHcloud Public CloudHetzner Cloud General-purpose and dedicated instances are a solved problem in the EU. | Mature |
| Managed Kubernetes | Amazon EKS Azure AKS Google Kubernetes Engine (GKE) | Scaleway KapsuleOVHcloud Managed Kubernetes CNCF-conformant managed control planes. Portable workloads move with little friction. | Mature |
| Container registry | Amazon ECR Azure Container Registry Google Artifact Registry | Scaleway Container RegistryOVHcloud Managed Private RegistryHarbor (self-hosted) OCI registries are commodity. Self-hosted Harbor is a fully sovereign fallback. | Mature |
| Managed PostgreSQL | Amazon RDS / Aurora Azure Database for PostgreSQL Cloud SQL / AlloyDB for PostgreSQL | Scaleway Managed DatabaseOVHcloud Managed DatabasesAiven for PostgreSQL Standard PostgreSQL is well served. Aurora-specific features (e.g. global database, serverless v2 autoscaling) have no exact twin, so plan around them. | Viable |
| Managed cache (Redis/Valkey) | Amazon ElastiCache Azure Cache for Redis Memorystore for Redis | Scaleway Managed Database for RedisAiven for Valkey/Redis In-memory caching is well covered; Valkey is the emerging open successor to Redis. | Viable |
| Message queue / pub-sub | Amazon SQS / SNS Azure Service Bus Google Cloud Pub/Sub | Scaleway Messaging & QueuingSelf-hosted NATS / RabbitMQ Scaleway offers SQS/SNS-compatible endpoints; self-hosted NATS covers the rest. | Viable |
| Event streaming (Kafka) | Amazon MSK / Kinesis Azure Event Hubs Managed Service for Apache Kafka | Aiven for Apache KafkaSelf-hosted Kafka / Redpanda Aiven runs managed Kafka in EU regions. Kinesis's exact API is not replicated, so target Kafka. | Viable |
| Authoritative DNS | Amazon Route 53 Azure DNS Google Cloud DNS | Scaleway Domains & DNSOVHcloud DNSBunny DNS Managed authoritative DNS is well covered. Route 53's routing policies need a manual rebuild. | Viable |
| Transactional email | Amazon SES Azure Communication Services No first-party service (SendGrid via Marketplace) | Scaleway Transactional EmailBrevo (FR) Scaleway TEM and Brevo (French) cover sending, reputation and analytics from the EU. | Viable |
| Secrets & key management | AWS Secrets Manager / KMS Azure Key Vault Secret Manager / Cloud KMS | Scaleway Secret ManagerHashiCorp Vault (self-hosted) Managed secret storage exists; self-hosted Vault gives full control including HSM-backed keys. | Viable |
| Application platform (PaaS) | AWS App Runner / Elastic Beanstalk Azure App Service Google App Engine | Clever Cloud (FR)Scalingo (FR) Clever Cloud is a production-proven French PaaS (Nantes): git-push or container deploys, autoscaling and managed add-ons (PostgreSQL, Redis, and more). A sovereign home for web apps, though narrower than App Engine’s wider service ecosystem. | Viable |
| Serverless containers | AWS Fargate Azure Container Instances Google Cloud Run | Scaleway Serverless Containers Scale-to-zero container hosting exists and is production-ready for request-driven workloads. | Viable |
| Customer identity (CIAM) | Amazon Cognito Azure AD B2C Google Cloud Identity Platform | Keycloak (self-hosted)ZitadelOry No managed Cognito clone, but self-hosted Keycloak and EU-based Zitadel are mature and widely run. | Viable |
| Serverless functions (FaaS) | AWS Lambda Azure Functions Cloud Run functions (Cloud Functions) | Scaleway Serverless FunctionsOVHcloud Functions The runtimes exist, but Lambda's breadth of native event sources and mature cold-start tuning is not matched. Fine for HTTP and cron; harder for deep event-driven fan-out. | Partial |
| Global CDN & edge compute | Amazon CloudFront / Lambda@Edge Azure Front Door Cloud CDN / Media CDN | Bunny.netGcoreOVHcloud CDN EU-headquartered CDNs deliver content well globally. Edge-compute primitives (equiv. to Lambda@Edge/CloudFront Functions) are thinner and less mature. | Partial |
| Metrics, logs & traces | Amazon CloudWatch / X-Ray Azure Monitor Cloud Monitoring / Logging / Trace | Self-hosted Grafana / Prometheus / Loki / Tempo The open-source LGTM stack matches the managed incumbents feature for feature, but you run it yourself. A fully managed, EU-sovereign one-stop observability suite is thin on the ground. | Partial |
| Managed ML platform | Amazon SageMaker Azure Machine Learning Vertex AI | OVHcloud AI Endpoints / AI TrainingScaleway GPU Instances + Managed Inference GPU compute, training and inference endpoints exist, but nothing matches SageMaker's end-to-end breadth (pipelines, feature store, model registry, tuning) as one managed platform. You assemble it. | Gap |
| Cloud data warehouse | Amazon Redshift Azure Synapse Google BigQuery | ClickHouse (self-hosted)Aiven for ClickHouse There is no EU-sovereign, fully managed columnar warehouse with the convenience of Redshift or BigQuery. ClickHouse (self-hosted or via Aiven) is excellent and fast, but it is a different operating model, not a drop-in. | Gap |
| Serverless wide-column NoSQL | Amazon DynamoDB Azure Cosmos DB Cloud Bigtable / Firestore | ScyllaDB (self-hosted)Self-hosted CassandraFerretDB / MongoDB-compatible DynamoDB's serverless billing and single-digit-ms scale have no EU-sovereign managed equivalent. ScyllaDB/Cassandra deliver the performance, but you run the cluster and lose the pay-per-request model. | Gap |
Where is Europe mature, and where are the real gaps?
The commodity layer is settled. Object and block storage, virtual machines, managed Kubernetes, container registries and managed PostgreSQL all have production-proven European equivalents, and most speak the same APIs, so that part of a migration is configuration, not a rewrite.
Four categories are graded gap for a reason, and we say so before you sign. Managed ML has no one-platform answer to SageMaker’s end-to-end breadth. There is no EU-sovereign serverless data warehouse with the convenience of Redshift or BigQuery. DynamoDB’s pay-per-request wide-column model has no managed twin. And global edge compute is thinner than CloudFront and Lambda@Edge. These are real engineering, not blockers. ClickHouse, ScyllaDB and self-hosted GPU stacks cover the ground, but on a different operating model, and we scope that effort honestly rather than hiding it.
Questions a CTO actually asks
- Do the EU equivalents keep the same APIs?
- Often, yes. Scaleway and OVHcloud object storage are S3-compatible, managed Kubernetes is CNCF-conformant, and PostgreSQL is PostgreSQL. Where an API has no twin (Kinesis, Route 53 routing policies, Aurora-specific features), the note on that row says so plainly.
- What does a gap verdict mean for a migration?
- That there is no managed, EU-jurisdiction service you can drop in. You either self-host the open-source equivalent (ClickHouse, ScyllaDB, the Grafana LGTM stack) or you reduce scope. It is engineering effort with a known shape, which is exactly what we scope on the first call rather than discovering it mid-migration.
- Is the AWS European Sovereign Cloud not enough on its own?
- For some risk models it is: genuine engineering operated under EU control, and we will say so when it fits. This map covers EU-headquartered providers; the AWS sovereign-cloud option is a separate, honest conversation, not a reason to skip the mapping.