Sandboxes

Hardware-isolated microVMs on Azure Container Apps. Snapshot/resume, scale-to-zero, sub-second startup, deny-default egress. This skill drives sandboxes through the aca CLI — one command surface, no ambiguity. Self-contained — everything is under references/ in this folder.

What it is

• Resource type: Microsoft.App/SandboxGroups (preview).
• Isolation: each sandbox is its own microVM, safe for untrusted code.
• Startup: sub-second from a prewarmed pool; suspend/resume preserves full memory + disk.
• Scale: zero to thousands; pay nothing when idle.
• Auth: aca delegates to az login — same identity, same MFA.