As a logical container for services, forming a key component of IA
They secure network traffic around virtual servers in a VPC
Services running under Kubernetes are deployed into one or more of them
To mark out the classic infrastructure services which make up an application