Isolated Sandbox Execution with Full Lifecycle Control: AWS Lambda Introduces MicroVMs

AWS has announced AWS Lambda MicroVMs, a new serverless computing primitive for securely running user- or AI-generated code. This service is built on Firecracker technology and provides VM-level isolation, instant execution and resumption, and direct control over the environment's lifecycle and state.

Existing computing approaches involved the following trade-offs:

• Virtual Machines: Provide strong isolation but take minutes to start
• Containers: Fast to run, but due to their shared kernel structure, require significant resources to harden security
• FaaS (Functions as a Service): Optimized for event-driven tasks, but unsuitable for long-running, interactive sessions that need to maintain state

Lambda MicroVMs are designed to bridge this gap. Each MicroVM provides an independent environment for a single user or session, preserving memory and disk state throughout the session, and pausing at low idle cost when the user is away.

Users can create MicroVM images using a Dockerfile and application code uploaded to Amazon S3. Build logs for the created image can be viewed via Amazon CloudWatch, and once creation is complete, the image can be run immediately via its ARN.