Teams building agentic applications, multi-tenant platforms,
development environments, and CI/CD systems have often had to stitch together
custom infrastructure to run untrusted code safely, preserve state across
sessions, and handle bursty demand without paying for idle capacity. Azure
Container Apps Sandboxes addresses that challenge with a new first-class resource
type in Azure Container Apps that provides fast, secure, ephemeral compute
environments with built-in suspend and resume capabilities.
Each sandbox runs in its own hardware-isolated microVM
boundary, supports standard OCI container images, and starts in sub-second
time. It can preserve memory, disk state, and preloaded libraries in a
snapshot, so workloads resume quickly from the same point without incurring a
cold start reload penalty. For technical practitioners, this means they can now
run AI-generated or otherwise untrusted workloads in strongly isolated
environments, preserve execution context across long-running tasks, and scale
from zero to thousands of concurrent sandboxes using the same Azure foundation
that also powers offerings such as GitHub Sandbox, hosted agents in Foundry
Agent Service, and Azure Container Apps Express.
Learn more.