GCP had second mover advantage in that they got to build a lot of constructs to segment identity and network access in ways that make sense. It's incredibly eas

GCP had second mover advantage in that they got to build a lot of constructs to segment identity and network access in ways that make sense. It's incredibly easy to give a service account access to conduct an action in every folder and project in a GCP org, compared with having to deploy a role to each account in an AWS org. VPCs being global and subnets being regional also make a lot more sense than having them be regional and zonal, respectively, in AWS. But the support I get from AWS is world class compared to GCP. My AWS account team is always proactively reaching out, not just for potential security risks but also with cost optimization advice.