-
Notifications
You must be signed in to change notification settings - Fork 421
Document Code Interpreter sandbox details #662
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
… in Azure AI Foundry.
|
@gukoff : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Learn Build status updates of commit 028017e: 💡 Validation status: suggestions
articles/ai-foundry/default/agents/how-to/tools/code-interpreter.md
For more details, please refer to the build report. Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them. |
|
Learn Build status updates of commit 84d5568: ✅ Validation status: passed
For more details, please refer to the build report. |
|
#assign-reviewer: @lindazqli |
|
@lindazqli Can you review whether this information is correct from a product standpoint? It looks good from the docs formatting/style side of things. |
|
Can you review the proposed changes? IMPORTANT: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
| - **Region**: The Code Interpreter sandbox runs in the same Azure region as your Foundry project. | ||
| - **Session lifetime**: A Code Interpreter session is active for up to 1 hour, with an idle timeout (see the Important note earlier in this article). | ||
| - **Isolation**: Each session runs in an isolated environment. If your agent invokes Code Interpreter concurrently in different conversations, separate sessions are created. | ||
| - **Network isolation and internet access**: The sandbox doesn't inherit your agent subnet configuration, and dynamic sessions are prevented from making outbound network requests. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Would be good to properly document the expected behavior. For instance, what if I want the code interpreter to make requests to read/write files on my storage account - would this be possible? Or is any API call gets blocked? Can we control this?
|
This pull request has been inactive for at least 14 days. If you are finished with your changes, don't forget to sign off. See the contributor guide for instructions. |
Source (Microsoft-internal link) - see this Viva Engage post and its referenced sources: https://engage.cloud.microsoft/main/org/microsoft.com/threads/eyJfdHlwZSI6IlRocmVhZCIsImlkIjoiMzY4MTUzMzQxMjQ4MzA3MiJ9?trk_copy_link=V2_HTML
These claims about code interpreter need verification. Can we get a PM to review?
In particular, there's no authoritative source for this information: