- Published on
Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer
- Authors
- Name
- DeepHorus
Microsoft has brought Azure Container Apps Express to general availability, a new deployment model that eliminates the environment provisioning step and replaces most configuration with opinionated defaults. It launches alongside the general availability of Azure Container Apps Sandboxes, the isolated compute layer Express runs on. The pairing follows the same shape Google shipped in Kubernetes Engine this year.
Express takes a container image, a region, and the configuration an application needs, then provisions compute, ingress, and scaling itself. Apps run on consumption CPU with per-second billing, scale to zero when idle, and carry no environment provisioning fee. Microsoft describes Express as developer-first and agent-first, noting AI-assisted workflows can create and update apps far faster than people can configure infrastructure by hand.
The speed comes from underneath. Microsoft's documentation states Express is built entirely on Container Apps Sandboxes, which provisions from prewarmed pools for subsecond startup, isolates each workload in its own hardware-isolated microVM boundary, and bursts to thousands of concurrent sandboxes. Sandboxes also support suspend and resume, snapshotting full state including memory and disk with sub-second restore.
Developers can use Sandboxes directly rather than through Express, which Microsoft positions for agent platforms and secure code-execution services. The top-level ARM resource is Microsoft.App/SandboxGroups, described as a management boundary for sandboxes sharing configuration.
Reddit reaction suggested the primitive predated the announcement. Commenter MuhBlockchain said Sandboxes already underpin core Azure services including Foundry Hosted Agents, while tankerkiller125real reported using them for Python sandboxes in a customer-facing agent harness. Commenter brianveldman distinguished the two: ACA Jobs handle run-to-completion tasks, while Sandboxes provide programmable, isolated environments with lifecycle control. Skepticism was directed at the isolation claim, and one question about equivalent capability in Azure Kubernetes Service went unanswered.
Express offers a focused subset of Container Apps features: scale to zero, multiple replicas, HTTP ingress, environment variables, secrets, IP restrictions, log streaming, and autoscaling. Custom domains, Key Vault references, Easy Auth, OpenTelemetry, Dapr, jobs, GPU workloads, and traffic splitting are excluded.
Both Microsoft and Google are answering the same question: how to give an agent an isolated environment that costs nothing while idle and returns in under a second.
