AWS EKS now offers per-Pod hardware isolation with Nitro Sandbox
tekbog · x · 2026-11-10
Amazon EKS introduces isolated and confidential pods: instead of sharing the node's Linux kernel, each pod now runs inside its own Nitro Sandbox — a first-level guest with hardware-assisted virtualization enforced by the Nitro hypervisor, providing a hardware trust boundary around every pod. Confidential mode protects data even from the host, and full network isolation is configurable. The poster jokes that 'evil Claude' can no longer escape the sandbox.
Related event: AWS Launches Nitro Sandboxes for Hardware-Level Pod Isolation(2 posts)→
More from Infra
- Maryland activists with 25K signatures block $5B AI data center on abandoned mall site — beffjezos · 2026-11-10
- Chip at bottom of perf list: new GPUs pack up to 72x H100 inference capacity, per Epoch AI — bookwormengr · 2026-11-10
- Chrome 153 ships native tab recorder: 120fps 4K AV1 capture, no ffmpeg needed — Vjeux · 2026-11-10
- AI capex needs to grow 5-10x before oversupply, argues Rob LeClerc — robleclerc · 2026-11-10
- simdjson disables 256-bit LASX on Loongson 3A6000: 128-bit LSX is 6.7% faster — lemire · 2026-11-10
- Vera launches gyms, benchmarks and agents for cloud infrastructure operations — tianyin_xu · 2026-11-10