All Products
Search
Document Center

Function Compute:Security overview

Last Updated:Feb 28, 2026

Alibaba Cloud Function Compute is a fully managed, event-driven computing service. It handles infrastructure such as servers, scaling, and reliability, so you can focus on writing and uploading code. Function Compute provides features such as logging, performance monitoring, and alerting.

Data security and user privacy are the top priorities of Alibaba Cloud. Alibaba Cloud is committed to building a public, open, and secure cloud computing service platform. Function Compute is developed based on the basic services of Alibaba Cloud.

Shared responsibility

Alibaba Cloud secures the platform. You secure your code and data.

Function Compute ensures service security in aspects such as function access, function scheduling, and runtimes. Users are responsible for the security of identity credentials, function code, layers, and configurations.

Alibaba Cloud responsibilities Your responsibilities
Function access Identity credentials
Function scheduling Function code
Runtimes Layers
Configurations
Shared responsibility model between Function Compute and users

Architecture: control plane and data plane

From the perspective of data usage, Function Compute workflows include the control plane and the data plane.

Control plane

The control plane manages function creation, updates, and deletion. It handles:

  • Permission control for function operations

  • Addition, deletion, modification, and query of code and configurations

  • In most cases, secure transmission and storage of function metadata, code, layers, and image caches

Data plane

The data plane handles function invocations. Three modules are involved in each invocation:

  • Access services -- Receive invocation requests and initiate function execution.

  • Scheduling services -- Manage the lifecycles of compute nodes, function instances, and invocation routes.

  • Compute nodes -- Host multiple function instances. User code runs in the runtimes of these instances.

Control-plane and data-plane workflow architecture