AWS Nitro Sandboxes is a new Amazon EC2 building block that gives each container, EKS pod, or ECS task the boundary of a hardware-isolated virtual machine, bringing the Nitro System's strong isolation, zero operator access, and cryptographic attestation to container workloads at near-native performance.