Agent skill · Security

aws-lambda-microvms

Build, run, debug, and operate applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments that run inside a container with up to 8-hour lifetimes. Triggers on: Lambda MicroVMs, Firecracker isolation, snapshot-resumable compute, suspend/resume, sandboxed or untrusted code execution, AI/agent code-execution sandboxes, interactive code playgrounds and notebooks (Jupyter, REPLs), reinforcement-learning environments, multi-tenant CI executors and build runners, sessionful game or simulation servers, isolated security scanners, long-lived sessions,

Amazon Web Services - Labs12,649★ · +18/wk · 2 repos on radarProfile →
claude-codeApache-2.0
Install
npx skills add awslabs/agent-plugins --skill aws-lambda-microvms --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 7
SKILL.md size: 16 KB
Bundled scripts: none
Path: plugins/aws-serverless/skills/aws-lambda-microvms/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 850
Language: Python

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# AWS Lambda MicroVMs > The AWS MCP server is recommended for sandboxed execution and audit logging. AWS Lambda MicroVMs are serverless compute environments that combine Firecracker VM isolation with container-like efficiency. Each MicroVM: - Runs your application as a **container inside a Firecracker microVM** — you can reproduce the environment locally. - Runs Amazon Linux 2023 as the base OS inside the MicroVM. - Boots from a **memory + disk snapshot** captured at image build time, so application init is skipped on run. - Has a dedicated, TLS-terminated HTTPS endpoint reachable with an auth token. - Can be **suspended and resumed** with state preserved; lives up to 8 hours. **Two-resource model:** - `MicrovmImage` — a versioned artifact built from `{S3 zip with Dockerfile} + baseImageArn`. Each version has per-architecture/chipset `Build`s. - `Microvm` — a running instance created (`RunMicrovm`) from an image version. **Two roles:** - `buildRoleArn` — used during image build (S3 read, CloudWatch logs, optional ECR). - `executionRoleArn` — assumed at runtime by the running MicroVM. ## When to use ### Choose Lambda MicroVMs when - **Analytics workloads** — isolated compute for dat

What's inside
Steps it walks through
  1. When to use
  2. Choose Lambda MicroVMs when
  3. Choose AWS Lambda (functions) when
  4. Choose something else when
  5. Typical workflow
  6. Core CLI commands
  7. Hook configuration
  8. microvmImageHooks (build-time)
  9. microvmHooks (runtime)
  10. Per-MicroVM size limits
  11. Additional capabilities
  12. Shell ingress for agent use cases
  13. Known constraints
  14. Reference index
Ships with 6 files
  • references/getting-started.md
  • references/iam-and-security.md
  • references/lifecycle-model.md
  • references/networking.md
  • references/snapshots-and-uniqueness.md
  • references/troubleshooting.md
Commands it runs
Create an image (zip with Dockerfile at root in S3, plus a managed base image)
aws lambda-microvms create-microvm-image \
Run a MicroVM (returns endpoint + microvmId). --image-identifier takes the
image ARN (the bare name is rejected); --image-version is the full major.minor string.
aws lambda-microvms run-microvm \
Mint an auth token and call the endpoint
curl "<endpoint>/" -H "X-aws-proxy-auth: $TOKEN"
Lifecycle
aws lambda-microvms suspend-microvm   --microvm-identifier microvm-...
aws lambda-microvms resume-microvm    --microvm-identifier microvm-...
More from agent-plugins
All skills →
dsqlBuild with Aurora DSQL — manage schemas, execute queries, handle migrations, diagnose query plans…Securitydataset-transformationGenerates code that transforms datasets between ML schemas for model training or evaluation. Use…Data & Analyticsaws-transformMigrate, modernize, and upgrade codebases to AWS. Run analysis on repos for tech debt, security…Securityaws-lambda-managed-instancesEvaluate, configure, and migrate workloads to AWS Lambda Managed Instances (LMI). Triggers on…DevOps & Clouddataset-evaluationValidates dataset formatting and quality for SageMaker model fine-tuning (SFT, DPO, or RLVR). Use…Data & Analyticsfinetuning-techniqueSelects a fine-tuning technique (SFT, DPO, RLVR, or RLAIF) for the user's use case and validates it…AI & Agents
About this skill
What does the aws-lambda-microvms skill do?

Build, run, debug, and operate applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments that run inside a container with up to 8-hour lifetimes. Triggers on: Lambda MicroVMs, Firecracker isolation, snapshot-resumable compute, suspend/resume, sandboxed or untrusted code execution, AI/agent code-execution sandboxes, interactive code playgrounds and notebooks (Jupyter, REPLs), reinforcement-learning environments, multi-tenant CI executors and build runners, sessionful game or simulation servers, isolated security scanners, long-lived sessions,

How do I install it?

Run `npx skills add awslabs/agent-plugins --skill aws-lambda-microvms --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From awslabs/agent-plugins, a repository with 850 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going
All skills →
The full catalog, by category and by tool.
Open Source Radar →
The repositories these skills come from, watched daily.
The people behind them →
Makers and builders across the ecosystem.