Generally available
Generally Available: Azure Container Apps Sandboxes
Teams building agentic applications, multi-tenant platforms, development environments, and CI/CD systems have often had to stitch together custom infrastructure to run untrusted code safely, preserve state across sessions, and handle bursty demand without paying for idle capacity. Azure Container Apps Sandboxes addresses that challenge with a new first-class resource type in Azure Container Apps that provides fast, secure, ephemeral compute environments with built-in suspend and resume capabilities.
Each sandbox runs in its own hardware-isolated microVM boundary, supports standard OCI container images, and starts in sub-second time. It can preserve memory, disk state, and preloaded libraries in a snapshot, so workloads resume quickly from the same point without incurring a cold start reload penalty. For technical practitioners, this means they can now run AI-generated or otherwise untrusted workloads in strongly isolated environments, preserve execution context across long-running tasks, and scale from zero to thousands of concurrent sandboxes using the same Azure foundation that also powers offerings such as GitHub Sandbox, hosted agents in Foundry Agent Service, and Azure Container Apps Express.
Read the original announcement