Skip to content

Tenancy, isolation, and trust boundaries

DimensionLambda (default)LMI
Fleet tenancyShared Lambda infrastructure (multi-tenant)Dedicated managed EC2 capacity in your account
Isolation substrate Firecracker
Firecracker — AWS microVM technology used by default Lambda on shared infrastructure to isolate execution environments.
-based isolation on shared fleet
Nitro-backed EC2 hosts with containerized execution
Network boundaryManaged by Lambda service boundaryDefined by your VPC, subnets, and security groups
Security boundary focusExecution environment on shared service fleetCapacity provider boundary in your account

Default Lambda and LMI are both managed Lambda experiences, but the trust boundary moves when you adopt LMI: you configure network and placement boundaries inside your account, while Lambda still operates the fleet behavior.

Boundary elementWhat it controls
SubnetsWhere managed instances are placed and which route domains they use
Security groupsAllowed inbound and outbound traffic paths for managed capacity
Instance requirementsHardware/architecture constraints for selected EC2 capacity
Scaling limitsUpper bounds for provider fleet growth

The capacity provider is the practical security boundary for LMI workloads: placement and network intent are yours; instance lifecycle and routing behavior are Lambda-operated.

SignalMeaning
EC2 tags (for example aws:lambda:capacity-provider)Instance belongs to Lambda-managed provider capacity
DescribeInstances operator metadataIndicates Lambda is the operating service for that capacity
Administrative control modelManaged instances are not general-purpose EC2 you manage directly

You can identify managed instances through EC2 metadata, but you should not treat them like normal EC2 admin targets. For quota-sensitive behavior and current API semantics, use Lambda Managed Instances as the product reference.