EC2's "isolation engine" provides mathematical assurance of VM isolation