Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer
Microsoft has made Azure Container Apps Express generally available alongside Container Apps Sandboxes, the microVM compute layer it runs on. Express skips environment provisioning and scales to zero, with subsecond startup from prewarmed pools. Custom domains, zone redundancy, Key Vault references, OpenTelemetry and Dapr are not supported. By Steef-Jan Wiggers
Microsoft recently updated Azure Container Apps Express to general availability, introducing a new sandbox layer for isolated compute. This release follows a similar approach to Google's Kubernetes Engine. Express simplifies deployment by provisioning compute, ingress, and scaling based on a container image, region, and specific app configuration.
Apps run on consumption CPU, scale to zero when idle, and incur no environment provisioning fees. The service is described as developer-first and agent-first, with AI-assisted workflows enabling faster app creation and configuration updates compared to manual infrastructure setup. Behind the scenes, Express leverages Azure Container Apps Sandboxes, a platform primitive that prewarms pools for subsecond startup, isolates workloads in microVM boundaries, and supports suspend and resume with sub-second restoration.
Sandboxes can be used independently of Express, primarily catering to agent platforms and secure code-execution services. The top-level resource for Sandboxes is Microsoft.App/SandboxGroups, serving as a management boundary for sandboxes with shared configuration. Microsoft's announcement generated mixed reactions, with some questioning the hardware isolation claims and others seeking compatibility with Azure Kubernetes Service.
The service supports scale to zero, multiple replicas, HTTP ingress, environment variables, manual secrets, IP restrictions, log streaming, and autoscaling based on HTTP, CPU, or memory rules. However, it lacks support for custom domains, zone redundancy, Key Vault secrets, Easy Auth, OpenTelemetry, Dapr, jobs, workload profiles, GPU workloads, multiple revisions, traffic splitting, or system-assigned managed identities.
Microsoft emphasizes Express as a focused subset of Container Apps capabilities, suitable for rapid prototyping and production use without replatforming. Access to Express requires a Microsoft Entra ID-based account, and standard environments are recommended for teams needing greater control over networking, GPU compute, advanced configuration, or environment-level capabilities.
Written by urgent.news from InfoQ's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
