Azure Container Apps dynamic sessions
Azure service that hands out Hyper-V-isolated sessions from prewarmed pools, either as a built-in code interpreter or running your own container image. A solid, locked-down code interpreter for Azure shops; not designed for long-lived coding agents.
Overview
Azure Container Apps dynamic sessions provide sandboxed execution from prewarmed pools. The built-in code interpreter runs Python, Node.js and shell; custom container sessions run any image. Each session sits behind a Hyper-V boundary and outbound network access is disabled by default.
First-party integrations with LangChain, LlamaIndex and Semantic Kernel make it straightforward to add a code tool to Azure-hosted agents.
Notable
- Up to 600 concurrent sessions per code interpreter pool.
- Hourly billing increments make very short sessions comparatively expensive.
Azure Container Apps dynamic sessions specifications
| Attribute | Details |
|---|---|
| Isolation | Hyper-V isolation; each session is isolated by a Hyper-V boundary |
| Deployment | Cloud provider service |
| Open source | No |
| SDKs and interfaces | REST API, Azure CLI, LangChain, LlamaIndex, Semantic Kernel |
| Cold start (vendor claim) | Prewarmed pools allocate sessions in milliseconds (no specific figure) |
| Max session length | Code interpreter: 220 s per execution; sessions deleted after a 5–60 min idle cooldown |
| Persistence | Session reuse by identifier; files in /mnt/data for the session’s life. No snapshots; ephemeral |
| GPU | No |
| Networking | Per-pool egress setting; egress disabled by default |
| Pricing | Code interpreter: $0.03 per session-hour (East US, Azure Retail Prices API), billed in one-hour increments. Custom container sessions billed on the Dedicated plan |
| Free tier | None stated for dynamic sessions |
| Compliance | Not documented |
| Regions | 40+ Azure regions |
Facts from Azure Container Apps dynamic sessions’s public documentation, verified November 8, 2026. Performance numbers are vendor claims.
Strengths and trade-offs
Strengths
- You build on Azure and want Hyper-V isolation without managing infrastructure
- You want egress disabled by default
- You use LangChain, LlamaIndex or Semantic Kernel
Trade-offs
- 220-second execution limit on the code interpreter
- Hourly billing increments penalize short sessions
- No snapshots, pause/resume or GPU
Best for: Azure-native apps running LLM-generated Python or Node code with egress off by default.
Where Azure Container Apps dynamic sessions ranks
How Azure Container Apps dynamic sessions compares
| Sandbox | Isolation | Open source | Self-host / BYOC | Cold start (vendor) | Max session | Snapshots / pause | GPU | SDKs |
|---|---|---|---|---|---|---|---|---|
| Azure Container Apps dynamic sessions | Hyper-V VM | No | No / No | Sub-second (pooled) | 220 s / exec | No / No | No | REST API, Azure CLI, LangChain, LlamaIndex, Semantic Kernel |
| AWS Bedrock AgentCore | MicroVM (Runtime) | No | No / No | Not documented | Up to 8 h | Not documented / Not documented | No | Python (AgentCore SDK), AWS SDKs, AWS CLI |
| Google Agent Platform Code Execution | gVisor | No | No / No | <1 s (warm) | 14-day state | No / Not documented | No | Python (Agent Platform SDK), REST API |
| OpenAI Code Interpreter & Hosted Shell | VM (unspecified) | No | No / No | Not documented | 20 min idle | No / No | No | OpenAI Responses API, Containers API, OpenAI SDKs |
| E2B | Firecracker microVM | Yes | Yes / Yes | Not documented | 1 h / 24 h (Pro) | Yes / Yes | No | Python, JavaScript/TypeScript |
Frequently asked questions
What is Azure Container Apps dynamic sessions?
How does Azure Container Apps dynamic sessions isolate code?
Is Azure Container Apps dynamic sessions open source?
How much does Azure Container Apps dynamic sessions cost?
What are the best Azure Container Apps dynamic sessions alternatives?
Sources
Cite this page
Agent Sandboxes. (2026). Azure Container Apps dynamic sessions. agentsandboxes.org. Last reviewed November 8, 2026. https://agentsandboxes.org/sandboxes/azure-dynamic-sessions/
Found an error or a missing sandbox? Submit a correction — every entry links to the sources it relies on.