Virtual Machine (VM)
A software emulation of a physical computer — the abstraction that made cloud computing possible, now sharing the stage with the lighter-weight container.
What is a virtual machine?
A virtual machine is a complete computer implemented in software: its own OS kernel, virtualized CPU, memory, disk, and network, running atop a hypervisor that time-slices real hardware among many VMs. The isolation is strong — each VM believes it owns a machine, and the hypervisor boundary is a hardware-enforced security wall. This abstraction is the substrate the entire cloud sits on: an EC2 instance, an Azure VM, a Compute Engine node — all VMs.
VMs versus containers — the distinction that organizes modern compute
The defining comparison. A VM virtualizes hardware and ships a whole guest OS — gigabytes, boot times in tens of seconds, but a genuine security boundary. A container virtualizes the OS — sharing the host kernel, measured in megabytes, starting in milliseconds, but isolated only as strongly as the kernel’s namespaces and cgroups allow. The practical rule: containers for application packaging and density (many services per host, fast scaling), VMs where you need full OS control, kernel-level customization, or the harder isolation boundary — which is exactly why cloud providers run your “containers” inside per-tenant VMs under the hood (Firecracker microVMs being the canonical example — VM-grade isolation at container-grade speed).
Where VMs remain the right answer
Legacy and stateful workloads that assume a full machine, applications needing specific kernel modules or OS tuning, licensing models tied to VMs, and any case where the container isolation boundary is insufficient for the threat model. The industry didn’t replace VMs with containers; it layered containers on VMs and picks per workload.
What people get wrong
- “Containers made VMs obsolete” — they made VMs the isolation layer beneath containers, not a relic.
- Right-sizing neglect: VMs provisioned for an imagined peak idle expensively; this is the first lever in any FinOps pass.
- Treating the hypervisor boundary as infinite — VM escapes are rare but real; defense in depth still applies.
Primary source: AWS — What is a virtual machine?
Historical figures and technical concepts for informational purposes only. Not technical, professional, legal, or financial advice. Sources: Official Documentation.