Vpc creation
Amazon
createVpc
...
describeVPC/deleteVpc are pretty much the same.
VPN gateway:
Amazon:
createVpnGateway - creates the vpn gateway
...
Amazon doesn't have equivalent for this command
The main difference - in Amazon, each network in VPC has its own route table; in cloudStack route table is shared across networks, and can be applied either to all of them or none.
...
If customer wants to remove some associations, he can do it with AssociateRouteTable after the ugprade is done.
Amazon:
createNetworkACL - creates network ACL for VPC and adds default ingress (deny all) and egress network acl entry (deny all) to it. NetworkACL acts like a container for networkACLEntries - actual firewall rules.
...