AWS Lambda Launches MicroVM Isolation for Secure AI Code Execution

Generative AI agents and multi-tenant platforms may execute code that developers cannot review in advance. Prompt injection, faulty output or malicious commands could compromise the host, other tenants and corporate data. Amazon Web Services (AWS) has therefore turned the Firecracker virtualization technology underpinning Lambda into standalone sandboxes that developers can create directly, providing VM-level isolation for each user or workload.

AWS launched Lambda MicroVMs on June 22, 2026. They can start, pause and resume almost instantly while retaining memory and disk state for up to eight hours. The initial rollout covers five regions: US East (N. Virginia), US East (Ohio), US West (Oregon), Europe (Ireland) and Asia Pacific (Tokyo). The service uses the ARM64 architecture, with each MicroVM offering up to 16 vCPUs, 32 GB of memory and 32 GB of disk storage.