AWS Lambda with isolated-vm

AWS Lambda with isolated-vm leverages Firecracker microVMs to provide hardware-level isolation for serverless workloads.

AWS Lambda secures every function execution using Firecracker, a purpose-built microVM technology that provides the security of traditional virtual machines with the speed of containers. By running each execution environment in its own isolated-vm, AWS ensures that memory, CPU, and network resources are never shared between different functions or accounts. This architecture uses the AWS Nitro System to maintain a minimal attack surface, supporting multi-tenant SaaS requirements through features like Tenant Isolation Mode. For developers, this means running untrusted code or sensitive data processing with 128 MB to 10 GB of allocated memory without managing the underlying hypervisor or hardware.

https://aws.amazon.com/lambda/features/