Download for macOS
Skill

aws-lambda-microvms

@awslabs Updated 2026-10-15

Build, run, debug, and operate applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments that run inside a container with up to 8-hour lifetimes. Triggers on: Lambda MicroVMs, Firecracker isolation, snapshot-resumable compute, suspend/resume, sandboxed or untrusted code execution, AI/agent code-execution sandboxes, interactive code playgrounds and notebooks (Jupyter, REPLs), reinforcement-learning environments, multi-tenant CI executors and build runners, sessionful game or simulation servers, isolated security scanners, long-lived sessions, or port-listening servers (gRPC, WebSocket, custom TCP). For standard event-driven Lambda functions, use the aws-lambda skill instead.

agent-pluginsagent-skillsagentsawscoding-agent-skillscoding-agents

Install

With your agent

Install OMGSkills skill "awslabs/agent-plugins:plugins/aws-serverless/skills/aws-lambda-microvms" into this agent's normal skills directory: use the OMGSkills MCP get_skill tool, install only the pinned_install commit and path, verify SKILL.md against pinned_install.skill_md_sha, and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/awslabs/agent-plugins /tmp/agent-plugins && ln -s /tmp/agent-plugins/plugins/aws-serverless/skills/aws-lambda-microvms ~/.claude/skills/aws-lambda-microvms

From README

AWS Lambda MicroVMs The AWS MCP server is recommended for sandboxed execution and audit logging. AWS Lambda MicroVMs are serverless compute environments that combine Firecracker VM isolation with container-like efficiency. Each MicroVM: Runs your application as a container inside a Firecracker microVM — you can reproduce the environment locally. Runs Amazon Linux 2023 as the base OS inside the MicroVM. Boots from a memory + disk snapshot captured at image build time, so application init is skipped on run. Has a dedicated, TLS-terminated HTTPS endpoint reachable with an auth token. Can be suspended and resumed with state preserved; lives up to 8 hours. Two-resource model: MicrovmImage — a versioned artifact built from {S3 zip with Dockerfile} + baseImageArn. Each version has per-architecture/chipset Builds. Microvm — a running instance created (RunMicrovm) from an image version. Two roles: buildRoleArn — used during image build (S3 read, CloudWatch logs, optional ECR).