<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee" -->

---
title: Container Apps Express Reaches GA on a Newly Generally...
description: Microsoft has made Azure Container Apps Express generally available alongside Azure Container Apps Sandboxes, the microVM-based isolated compute layer Express...
canonical: https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer | daily.dev
og:description: Microsoft has made Azure Container Apps Express generally available alongside Azure Container Apps Sandboxes, the microVM-based isolated compute layer Express...
og:url: https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee
og:image: https://api.daily.dev/og/posts/kh8TH73EE.png
og:image:alt: Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer

**[InfoQ](https://daily.dev/sources/infoq)** · 5 min read · 0 upvotes · 0 comments

## Summary

Microsoft has made Azure Container Apps Express generally available alongside Azure Container Apps Sandboxes, the microVM-based isolated compute layer Express runs on. Express removes environment provisioning, scales to zero, bills per second, and offers subsecond startup from prewarmed pools, but excludes custom domains, zone redundancy, Key Vault references, OpenTelemetry, Dapr, and several other standard Container Apps capabilities. Sandboxes can be used directly and reportedly already underpin services like Foundry Hosted Agents. The pairing mirrors Google's GKE Pod snapshots and Agent Sandbox approach, both aimed at giving AI agents isolated, cheap, fast-resuming compute. Migration from standard environments is available via an archive-and-restore process taking about 15 minutes. Express is now available in more than 40 Azure regions.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.infoq.com/news/2026/10/container-apps-express-sandboxes>

## Questions this post answers

### What features are not supported in Azure Container Apps Express?

Azure Container Apps Express does not support custom domains, zone redundancy, Key Vault secret references, Easy Auth, OpenTelemetry, Dapr, jobs, workload profiles, GPU workloads, multiple revisions with traffic splitting, or system-assigned managed identities. Service discovery is absent, so apps must communicate through public URLs, and ingress is HTTP only. Outbound subnets cannot be changed once set.

_Track which Container Apps Express limitations matter before committing a production workload, with daily.dev._

### How do I migrate an existing Azure Container Apps environment to Express?

Migration works through archive and restore: archive the existing standard environment, then restore it as an Express environment. The process preserves app and environment configuration, takes about 15 minutes, and does not change the consumption-free grant. An opt-out form is available in the migration notice for organizations needing additional approval or coordination.

_daily.dev helps engineers planning an Express migration weigh the tradeoffs before replatforming._

### What is Azure Container Apps Sandboxes and how does it relate to Container Apps Express?

Azure Container Apps Sandboxes is the microVM-based isolated compute layer that Container Apps Express runs on, provisioning from prewarmed pools for subsecond startup and isolating each workload in its own hardware-isolated microVM boundary. It bursts to thousands of concurrent sandboxes and supports suspend, resume, and full-state snapshotting with sub-second restore. Developers can use Sandboxes directly instead of through Express, and it reportedly already underpins services such as Foundry Hosted Agents.

_Developers choosing an isolation layer for agent workloads can compare options like Sandboxes on daily.dev._

## Similar posts on daily.dev

- [Run Untrusted AI Agent Code Safely with Azure Container Apps Sandboxes](https://daily.dev/posts/run-untrusted-ai-agent-code-safely-with-azure-container-apps-sandboxes-og96gnzce) · InfoQ · 0 upvotes · 0 comments
- [AWS, Google Cloud, Microsoft Azure, and Cloudflare now all offer agent sandboxes. None built them the same way.](https://daily.dev/posts/aws-google-cloud-microsoft-azure-and-cloudflare-now-all-offer-agent-sandboxes-none-built-them-th-6t7zmfizv) · The New Stack · 2 upvotes · 0 comments
- [Introducing the new hosted agents in Foundry Agent Service: secure, scalable compute built for agents](https://daily.dev/posts/introducing-the-new-hosted-agents-in-foundry-agent-service-secure-scalable-compute-built-for-agent-0euoil4hi) · DevBlogs · 0 upvotes · 0 comments
- [Google Cloud Run sandboxes are in public preview](https://daily.dev/posts/google-cloud-run-sandboxes-are-in-public-preview-hlalucfys) · Google Cloud · 2 upvotes · 1 comments

---

Tags: [#cloud](https://daily.dev/tags/cloud), [#kubernetes](https://daily.dev/tags/kubernetes), [#serverless](https://daily.dev/tags/serverless)

[View this post on daily.dev](https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer","url":"https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee"},"datePublished":"2026-10-01T06:42:14.607Z","dateModified":"2026-10-01T06:43:13.353Z","description":"Microsoft has made Azure Container Apps Express generally available alongside Azure Container Apps Sandboxes, the microVM-based isolated compute layer Express...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e554b7e3e1dd70b9634edff97845d33d?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/e554b7e3e1dd70b9634edff97845d33d?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoQ","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoQ","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/afc3bced3e1e4b188dd9127017a60e0c","url":"https://daily.dev/sources/infoq"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cloud,kubernetes,serverless","timeRequired":"PT5M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoQ","item":"https://daily.dev/sources/infoq"},{"@type":"ListItem","position":3,"name":"Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer"}]}
{"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/container-apps-express-reaches-ga-on-a-newly-generally-available-sandbox-layer-kh8th73ee#faq","mainEntity":[{"@type":"Question","name":"What features are not supported in Azure Container Apps Express?","acceptedAnswer":{"@type":"Answer","text":"Azure Container Apps Express does not support custom domains, zone redundancy, Key Vault secret references, Easy Auth, OpenTelemetry, Dapr, jobs, workload profiles, GPU workloads, multiple revisions with traffic splitting, or system-assigned managed identities. Service discovery is absent, so apps must communicate through public URLs, and ingress is HTTP only. Outbound subnets cannot be changed once set. Track which Container Apps Express limitations matter before committing a production workload, with daily.dev."}},{"@type":"Question","name":"How do I migrate an existing Azure Container Apps environment to Express?","acceptedAnswer":{"@type":"Answer","text":"Migration works through archive and restore: archive the existing standard environment, then restore it as an Express environment. The process preserves app and environment configuration, takes about 15 minutes, and does not change the consumption-free grant. An opt-out form is available in the migration notice for organizations needing additional approval or coordination. daily.dev helps engineers planning an Express migration weigh the tradeoffs before replatforming."}},{"@type":"Question","name":"What is Azure Container Apps Sandboxes and how does it relate to Container Apps Express?","acceptedAnswer":{"@type":"Answer","text":"Azure Container Apps Sandboxes is the microVM-based isolated compute layer that Container Apps Express runs on, provisioning from prewarmed pools for subsecond startup and isolating each workload in its own hardware-isolated microVM boundary. It bursts to thousands of concurrent sandboxes and supports suspend, resume, and full-state snapshotting with sub-second restore. Developers can use Sandboxes directly instead of through Express, and it reportedly already underpins services such as Foundry Hosted Agents. Developers choosing an isolation layer for agent workloads can compare options like Sandboxes on daily.dev."}}]}
```

