Amazon Firecracker: Isolating Serverless Containers and Functions

## Executive Summary This briefing explains AWS Firecracker, a lightweight microVM VMM designed for fast startup and strong isolation for serverless and container workloads, compares it to Kata, Nabla, and gVisor, notes current limitations (non-OCI compliance and limited orchestration support), and demonstrates integrating Aqua MicroEnforcer into a Firecracker-emulated container to provide added visibility and security controls—showing a simulated exploit being blocked.