Hacker News

AWS Nitro Sandboxes: Hardware-Enforced Workload Isolation on Amazon EKS

5 points by csantanapr ago | 1 comments

csantanapr [-]

Run agentic AI, multi-tenant SaaS, and regulated workloads with the isolation of a dedicated Amazon Elastic Compute Cloud (Amazon EC2) instance and the simplicity of a Kubernetes pod. Nitro Sandboxes give each pod a hardware-enforced security boundary, built on the same Nitro System that isolated EC2 instances from each other.