AWS Nitro Sandboxes: Hardware Isolation for Your Container Workloads
AWS Nitro Sandboxes brings VM-level hardware isolation directly to your containers, EKS pods, and ECS tasks without sacrificing performance. You get strong security boundaries, zero operator access, and cryptographic attestation—basically, the Nitro System's fortress-like protection wrapped around every containerized workload.
source: [aws/compute-blog]