Dedicated Hardware Sandbox

An execution environment isolated on bare-metal hardware dedicated to a single customer.

Responsibility. Provides the strongest isolation by eliminating shared hardware and kernels.

Also known as: Bare metal isolation

Variant of Execution Sandbox abstract

When to choose. Choose when threat modelling demands the strongest possible isolation per customer and its cost and operational complexity are acceptable.