Sandbox

The sandbox provides a secure, isolated environment where the Kiro Web agent executes tasks. Each task runs in its own sandbox with configurable access controls, ensuring your code and resources remain protected.

You can configure sandbox settings from the Agent settings page under Sandbox.

When you assign a task, the agent:

1. Spins up an isolated sandbox environment
2. Clones authorized repositories into the sandbox
3. Configures the environment based on detected project settings
4. Executes the task with access only to explicitly permitted resources
5. Tears down the sandbox when the task completes

Configure sandbox access and behavior for your tasks.