You can use API Gateway or WAF to protect your Function Compute functions in web scenarios if you want to implement more effective and overall protection. WAF can alleviate traffic surges caused by attacks and provide an all-in-one security protection for web applications such as websites, HTML5 pages, mini programs. WAF defenses against web attacks, detects application vulnerabilities, prevents webpage tampering, safeguards against data leaks, identifies abnormal search engine activities, mitigates crawler risks, and reinforces API security.
For more information, see Enable WAF protection, Core web protection, and IP address-based access control plug-in.