Azure is so restrictive in this area compared to AWS.
Azure really limits how vendors can package up appliances and keep them secure. Basically in Azure the only way a vendor can do this is to deny the customer access to almost everything.
On the plus side, I see Azure keep announcing features that AWS has had for 5+ years, so in another couple of years they should hopefully have caught up to where AWS was about 7 years ago.
