A system for isolating requests that comprises, a shared command queue, a first virtual computational resource and a second virtual computational resources. The first virtual computational resources comprises a policy engine configured to access policies comprising criteria for assigning commands corresponding to requests from tenants to compartments, determine, according to the policies, compartments to which to assign the commands corresponding to the requests, produce the commands corresponding to the requests, and queue the commands in the shared command queue, each command comprising compartment assignment information. The second virtual computational resource comprises a command consumer configured to access a subscription to determine a subscribed compartment to which the second virtual computational resource is subscribed, select commands from the shared command queue according to selection criteria that include the subscribed compartment, and consume the selected commands from the shared command queue for processing by the second virtual computational resource.