Generally Available: Pod sandboxing on AKS

Running containerized workloads in shared environments can raise concerns around security and workload isolation. To address this, AKS now supports pod sandboxing, enabling customers to run containers in per-workload pod VMs. Each pod VM is isolated from others and from the host, providing a strong compute isolation boundary. 

This feature enhances workload security by reducing the risk of cross-pod interference and host-level vulnerabilities, making it ideal for multi-tenant scenarios or sensitive applications.

Learn more.