This topic describes how to use Function Compute to build a public, open, and secure cloud computing service platform from the perspectives of data security, user privacy, and data usage.

Alibaba Cloud Function Compute is a fully managed event-driven compute service. Function Compute allows you to focus on writing and uploading code without the need to manage infrastructure resources such as servers. Function Compute allocates computing resources, runs code in an elastic and reliable manner, and provides features such as log query, performance monitoring, and alerting.

Data security and user privacy are the top priorities of Alibaba Cloud. Alibaba Cloud is committed to building a public, open, and secure cloud computing service platform. The Function Compute platform is built based on Alibaba Cloud basic services. Function Compute ensures that users can access and schedule functions in a secure manner and provides runtime environments. Users are responsible for the security of identity credentials, function code, layers, and configurations. db-fc-swp
From the perspective of users, Function Compute workflows include control-plane workflows and data-plane workflows.
  • Control-plane workflows

    The control-plane workflow includes function permission control, as well as the addition, deletion, modification, and query of code and configurations. Control-plane workflows mainly involve secure transmission and storage of data, such as the function metadata, code, layers, and image caches.

  • Data-plane workflows
    The data-plane workflow refers to the invocation process of a function. Three modules are involved in the invocation process of a function: the access service, scheduling service, and compute nodes.
    • The access service receives function invocation requests and initiates invocations.
    • The scheduling service manages lifecycles of compute nodes and function instances and calls routes.
    • A compute node includes multiple function instances. User code is run in the runtime environment of the function instances.
db-fc-swp2