Account templatesReusable account and launch templates for every audience.Platform
Secure, self-service AWS environments for developers, researchers, students, partners and business teams, without scaling risk, cost or platform overhead.
Deployed in your AWS account
Runs inside your AWS Organisation. Your identities, data and guardrails stay yours.
Configurable guardrails
Security, compliance and cost controls that match how your organisation works.
Marketplace available
Subscribe and procure through AWS Marketplace with standard AWS billing.
Enterprise ready
SSO, approvals, audit trails, reporting and an API for every workflow.
Core platform capabilities
Account templatesReusable account and launch templates for every audience.
Guardrails and policiesManaged, custom and inline policies, boundaries and SCPs.
Cost controls and budgetsPer-lease budgets with automatic alert, lock or wipe actions.
Identity and SSOYour choice of identity providers, even more than one.
Lifecycle automationExpiry, automatic cleanup, hooks and account recycling.
Audit and observabilityEvery request, approval and lifecycle event recorded.
Approvals and governanceApproval workflows, team sharing and terms of service.
Reporting and insightsSpend, usage and lifecycle across templates and teams.Template creation
Reduce time-to-value with flexible, repeatable and intelligent ways to build.
How Sandbox Studio works
01 / 05
Define
Define policies, budgets and permissions.
02 / 05
Distribute
Distribute governed account templates to approved audiences.
03 / 05
Launch
Launch compliant, pre-built environments in minutes.
04 / 05
Operate
Visibility and reporting across activity, cost and lifecycle.
05 / 05
Promote
Move validated workloads beyond the sandbox when they are ready.
Promote outputs through your existing CI/CD and production workflows, or eject a sandbox account from Sandbox Studio so it can become a more persistent environment. Sandbox Studio gives teams a governed path from experimentation into longer-lived use, while your existing production controls remain in place.
Integrate and automate
REST API and webhooks
API coverage for provisioning, approvals, lifecycle events and administrative workflows. Integrate with internal portals, ITSM tools, CI/CD pipelines and custom applications, and subscribe to lifecycle events through Amazon SNS.
- Internal portals
- ITSM tools
- CI/CD pipelines
- Custom applications
- Identity providers
- Microsoft Teams & Slack
MCP for AI-powered administration
Use MCP-compatible AI assistants to create and manage account templates, launch templates and administrative workflows in natural language.
> Create a 14-day AI sandbox template with a $200 budget,
Bedrock access and auto-wipe on expiry.
⚙ sandbox-studio · create_account_template ✓
"AI Prototyping" is ready to publish.
Architecture and security
- Installs into a governing account you own, built on native AWS services
- Sandbox accounts live in a dedicated organisational unit
- Sign in with your choice of identity providers, including more than one for different groups
- Automatic account cleanup, recycling and drift detection
- AWS Foundational Technical Review completed
Your AWS Organisation
Your Sandbox Studio governing account
One place to see and steer every sandbox: who has each account, what it's costing and when it comes back. It hands accounts out, enforces your rules and cleans them up, all from an account you own.
Managing 8 sandbox accounts
Sandbox accounts
Available
In use
Cleaning