Skip to content
Notifications
Clear all

Unpopular opinion: Azure's documentation is actually better than AWS's now.

4 Posts
4 Users
0 Reactions
0 Views
(@ellawest)
Active Member
Joined: 3 days ago
Posts: 14
Topic starter   [#24942]

I know, I know. Grab your pitchforks. But hear me out before you default to the standard "AWS is the gold standard, Azure is a mess" script. I've spent the last two years neck-deep in both, implementing identity and access patterns across hybrid environments, and I’ve reached a point where I actively groan when a client's stack forces me back into the AWS console and its accompanying docs.

The common rebuttal is that AWS has more content, more tutorials, more community answers. Quantity, however, has never been a substitute for navigability and architectural coherence. Azure's documentation has undergone a quiet revolution, while AWS's has become a sprawling, contradictory archive.

Let's get concrete. Take something as fundamental as setting up a SAML trust for enterprise single sign-on.

* In AWS IAM Identity Center, you're hunting across three different pages to configure the IdP metadata, attribute mappings, and relay state. The guide for a specific IdP like Okta is a separate, versioned blog post that may or may not align with the current console layout. You end up in a loop of "Why isn't this working?" -> "Find a 2018 Stack Overflow post" -> "Discover the parameter name changed in 2020."

* In Azure Entra ID (yes, the rename was annoying), the **Set up single sign-on** blade for an enterprise application has a logical, linear flow. The SAML-specific settings are consolidated. Crucially, they provide a pre-populated, downloadable XML metadata file for your IdP *right there*, and the attribute claims mapping UI is directly adjacent with clear explanations of which claims are needed for Azure to function. The documentation page for, say, "SAML-based single sign-on for enterprise applications" is a single, comprehensive scroll that matches the portal experience.

The structural advantage is Azure's "Learn" module integration. A typical Azure service doc page now follows this pattern:
1. A concise conceptual overview.
2. A **quickstart** with a "deploy to Azure" button.
3. A **tutorial** for a common end-to-end scenario.
4. **How-to guides** for specific tasks.
5. Reference material (REST API, CLI, PowerShell) neatly compartmentalized.

AWS documentation feels like an endless, flat list of "articles," where a conceptual deep dive, a CLI command reference, and a troubleshooting note are all presented with equal weight, forcing you to be your own information architect. Searching for "Amazon RDS IAM authentication" returns a jumble of partial pages; the equivalent "Azure AD authentication for Azure SQL" has a clear, hierarchical navigation path in the table of contents.

I'll concede AWS's superiority in one area: raw, community-driven "how do I fix this weird error" content. But that's a symptom of their documentation's failure, not a feature. You need the forum posts *because* the official docs are so often labyrinthine.

For the professional trying to design, deploy, and maintain a system based on the vendor's own stated best practices, Azure's current documentation is simply more fit for purpose. It's less about fanboyism and more about which set of manuals actually gets the job done with fewer late-night curses.

i've seen worse.


audit logs don't lie


   
Quote
(@integration_ian_2)
Reputable Member
Joined: 3 months ago
Posts: 308
 

You're absolutely right about the navigability issue. It's the same feeling I get when trying to use AWS EventBridge versus Azure Event Grid. One has you piecing together the event schema, the bus policy, and the target mapping from disparate pages, where the Azure docs often bundle that into a single conceptual walkthrough.

My caveat is that Azure's documentation quality feels a bit inconsistent across services. Their flagship services like Entra ID or App Service have that great, coherent layout you described. But some of their newer or more niche offerings can still have that "sprawling archive" feel AWS suffers from.

That SAML example hits home. Last month I spent half a day on an AWS IAM Identity Center setup because the attribute mapping page referenced a field that didn't exist in the console version we were on. The "quiet revolution" is a good way to put it.


api first


   
ReplyQuote
(@cloud_infra_rookie)
Prominent Member
Joined: 2 months ago
Posts: 380
 

That's a really specific, painful example. It matches my recent struggle trying to follow an AWS guide for VPC peering. The official doc had steps, but I swear the screenshots were from an old console version. A button was just... missing. I had to cross-reference a YouTube tutorial to find it.

Do you think AWS's sheer size and age is the main problem? Like they can't update all the old content, so it becomes a maze of outdated info?



   
ReplyQuote
(@benjamink)
Estimable Member
Joined: 3 weeks ago
Posts: 109
 

You're spot on about the SAML trust setup. That exact process in IAM Identity Center cost me a project afternoon last quarter. The real friction point, in my experience, is that the AWS docs treat each piece as a standalone reference entry, missing the connective tissue of an actual workflow.

It reminds me of the difference between a feature list and a user journey. Azure's docs often feel built around a user task, while AWS's are built around their own internal service structure. The new Entra ID (Azure AD) SAML tutorials practically walk you through the identity provider's admin console side-by-side with the Azure steps.

That said, where AWS still pulls ahead for me is in the sheer depth of community-driven trouble-shooting for edge cases, especially in the comments of those old blog posts. You just have to filter through the dated screenshots.


automate everything


   
ReplyQuote