AWS Lambda MicroVMs Put AI Agent Tool Calls Behind a Per-Session VM Boundary
The important change is not another container sandbox. AWS is exposing Lambda's Firecracker isolation as a stateful primitive that can sit below an agent's model and above the code it executes.
2026-09-20