AWS Lambda announces new tenant isolation mode to simplify building tenant-aware applications

Today, AWS Lambda announced a new tenant isolation mode, enabling customers to isolate request processing for individual tenants or end-users invoking a Lambda function. This launch simplifies building multi-tenant applications on Lambda, such as SaaS platforms for workflow automation or code execution.

Customers building multi-tenant applications have strict isolation requirements when running code or processing data for individual tenants or end-users. Previously, customers met these requirements by implementing custom solutions, such as creating dedicated Lambda functions per tenant and routing requests from individual tenants to their associated functions. Today’s launch enables you to isolate request processing for each tenant invoking a Lambda function, helping you meet strict tenant isolation requirements without the need to build and operate custom solutions. This launch extends Lambda’s isolation boundary from a single function to each tenant invoking that function.

To use the new tenant isolation mode, customers specify a unique tenant identifier when invoking their Lambda function. Lambda uses this identifier to route invocation requests to a function’s underlying execution environments and ensures that execution environments associated with a particular tenant are never used to serve requests from other tenants invoking the function.

The new tenant isolation mode for AWS Lambda is available in all AWS Regions, except Asia Pacific (New Zealand), AWS GovCloud (US), and China. To learn more about Lambda's new tenant isolation mode, visit Lambda documentation, the launch blog post, and the compute blog post. For tenant isolation mode pricing information, visit AWS Lambda Pricing.