Container Apps Express Reaches GA on a Newly Generally Available Sandbox Layer

Microsoft recently made Azure Container Apps Express generally available, a deployment model that removes the environment provisioning step and replaces most configuration with opinionated defaults, according to InfoQ reporter Steef-Jan Wiggers. It ships alongside the general availability of Azure Container Apps Sandboxes, the isolated compute layer Express runs on.

Express accepts a container image, a region, and whatever configuration an app needs, then provisions compute, ingress, and scaling itself. Apps run on consumption CPU with per-second billing, scale to zero when idle, and carry no environment provisioning fee. Microsoft describes Express as developer-first and agent-first.

Express is built entirely on Container Apps Sandboxes, which provision from prewarmed pools for subsecond startup, isolate each workload in its own hardware-isolated microVM boundary, and burst to thousands of concurrent sandboxes, per Microsoft's documentation. Sandboxes support suspend and resume, snapshotting full state including memory and disk, with sub-second restore. The top-level ARM resource is Microsoft.App/SandboxGroups, described as a management boundary for sandboxes sharing configuration.

Express supports scale to zero, multiple replicas, HTTP ingress on a Microsoft-managed domain, environment variables, manual secrets, IP restrictions, log streaming, and autoscaling on HTTP, CPU, or memory rules. It does not support custom domains, zone redundancy, Key Vault secret references, Easy Auth, OpenTelemetry, Dapr, jobs, workload profiles, GPU workloads, multiple revisions and traffic splitting, or system-assigned managed identities. Service discovery is absent, ingress is HTTP only, and outbound subnets cannot be changed once set.

Express requires a Microsoft Entra ID-backed account; personal Microsoft accounts are not supported. Management uses containerapps.azure.com and sandboxes.azure.com. Self-migration works through archive and restore, which Microsoft says preserves configuration, takes about 15 minutes, and does not change the consumption-free grant. At general availability, Express reaches more than 40 Azure regions. Microsoft says thousands of Express apps were created during public preview. Reddit commenters discussed existing Sandboxes use, including Python sandboxes for a customer-facing agent harness and Bicep deployments; one commenter expressed skepticism about the isolation claim, and another asked whether the capability is available in Azure Kubernetes Service.