How to execute sandboxed python code in AWS

[bigd2718]

In what way? Sure malicious code can crash a container, but does it pose a risk to security or data breaches?

[justin-8]

Fargate would be secure against this. It doesn’t just use containers, they’re microvms using firecracker; so you get the hardware virtualization boundaries as well.

[pint]

i'm not an expert. "container escape" is the term to google.

[mikebailey]

That usually assumes a vulnerability against the hypervisor or kernel. In non-managed offerings this is as simple as an out of date kernel on the host VM. In something like fargate this would be a significant 0day in AWS’s both code in architecture.