# AWS adds hardware-isolated sandboxes for containers and virtual machines

_Published Monday, November 9, 2026 at 12:21 PM EST · Infrastructure, AI · Latest · Tier 2 — Notable_

AWS has made Nitro Sandboxes available on most Nitro-based EC2 instances in all commercial regions worldwide at no additional charge. The service gives individual EKS pods, ECS tasks or lightweight virtual machines their own hardware isolation boundary, including workloads that execute AI-generated code.

AWS says customers can share an EC2 instance across isolated workloads and use cryptographic attestation to release secrets only to sandboxes that prove their integrity. EKS and ECS support requires a one-line configuration change and retains existing identity, networking, storage and monitoring integrations. The service runs on customers' EC2 instances.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/11/nitro-sandboxes-eks-ecs-ec2/)

---
Canonical: https://techandbusiness.org/newswire/B0UO6UhmzVD8MWhfpFtepl
Published: 2026-11-09T17:21:11.362Z
Story chronology: 2026-11-09T08:00:00.000Z
Retrieved: 2026-11-09T20:01:13.420Z
Publisher: Tech & Business (techandbusiness.org)