Secure, isolated compute environments with sub-second startup for agentic workloads.
Azure Container Apps Sandboxes is generally available.
- Azure subscription with permission to create resource groups
- Azure CLI (
az) installed and logged in - uv (installs Python 3.13+ automatically)
uv sync
uv run python/samples/setup/setup.pyThis creates a resource group, a sandbox group, grants your user the data-plane role, and writes python/samples/.env. Role assignments take 30-60 seconds to propagate.
Optionally install the aca CLI for shell-based samples.
cd python/samples/01-webapps/simple-anonymous/python
uv run run.pyA sandbox boots, a Node.js app starts, and a public URL is printed. Open it in a browser to see a live system-stats page served from inside the sandbox. From here, pick any sample below.
| Method | Description | Link |
|---|---|---|
| Portal | Browser UI for sandbox groups and sandboxes | sandboxes.azure.com |
| CLI | Shell scripting and automation | CLI quickstart |
| Python SDK | Programmatic access | PyPI |
| # | Lab | What it shows |
|---|---|---|
| 01 | getting-started | Full surface end-to-end: create group → sandbox → exec → files → ports → egress → lifecycle → cleanup |
| 02 | bring-your-own-container | Sandbox from your own container image, open a port to access its web content |
| 03 | sandbox-inception | SDK inside a sandbox spawning child sandboxes via managed identity |
Each scenario includes a README with architecture notes, prerequisites, and step-by-step instructions.
| # | Scenario | What it shows | Python | CLI |
|---|---|---|---|---|
| 01 | webapps | Web app in a sandbox, anonymous or Entra-gated | Python | CLI |
| 02 | coding-agents | Copilot CLI in a sandbox with deny-default egress | Python | CLI |
| 03 | code-interpreter | LLM-driven code execution: generate, run, observe, iterate | Python | - |
| 04 | swarms | Orchestrator coordinating many sandbox workers | Python | CLI |
| 05 | data-processing | Producer/consumer pipelines on shared AzureBlob volumes | Python | - |
| 06 | developer-workflows | PR builds, ephemeral CI, on-demand dev environments | Python | - |
| 07 | computer-use | LLM computer-use agent driving Chrome inside a sandbox | - | - |
| 08 | sandbox-agents | Agent frameworks (OpenAI, Claude, LangChain) using sandboxes as tool-execution backend | Python | - |
| 09 | mcp-hosting | Host MCP servers in a sandbox | Python | - |
| 10 | connectors-email-triage | Outlook trigger → sandbox → Copilot CLI → Teams triage card | Python | - |
| 11 | connectors-document-automation | SharePoint trigger → sandbox → document extraction → results uploaded | Python | - |
- Documentation - concepts, guides, API reference
- Portal - browser-based management UI