All Products
Search

This Product

    Object Storage Service:Overview

    Document Center

    Object Storage Service:Overview

    Last Updated:Oct 08, 2026

    OSS Agentic Bucket is an infinitely scalable bucket type tailored for AI Agent scenarios. It inherits the core features of a general-purpose bucket, with major improvements to namespacing, wildcard domain name CNAME, and bucket capacity. For large numbers of sandboxes, it provides independent storage spaces that you can create quickly at high concurrency, with isolated physical resources, permissions, and domain names.

    Important

    OSS Agentic Bucket is available only in the China (Hangzhou), China (Beijing), and Japan (Tokyo) regions. To apply for activation, submit a ticket.

    Use cases

    OSS Agentic Bucket is well suited to the following use cases:

    Persistent storage for Agent sandboxes

    An AI Agent platform creates an independent sandbox for each user session and must provide each sandbox with independently managed persistent storage that can be provisioned at high concurrency and low latency. OSS Agentic Bucket provides up to tens of billions of Bucket Spaces for each AI Agent platform, with an inherently isolated storage space for every sandbox.

    Storage isolation for SaaS multi-tenancy

    A Software as a Service (SaaS) application must provide each tenant with isolated storage, separated data and permissions, and per-tenant metering. A dedicated Bucket Space per tenant delivers resource-level isolation, independent permissions and domain names, and single-tenant security.

    Data partitioning for IoT devices

    An Internet of Things (IoT) platform manages a large number of devices and needs independent data storage for each device. You can create an Agentic Bucket for each device type and a Bucket Space for each device. An Agentic Bucket-level configuration template centrally manages the default settings of the storage spaces for all devices, eliminating the need to configure them individually.

    Key concepts

    • OSS Agentic Bucket: A bucket type built for AI Agents. Each Agentic Bucket can hold up to tens of billions of Bucket Spaces. You can use an Agentic Bucket to centrally manage Bucket Space configurations, collect logs, and monitor resources. Bind a custom wildcard domain name CNAME to an Agentic Bucket so that each Bucket Space can be accessed through its own domain name.

    • Bucket Space: An independent storage space within an OSS Agentic Bucket. A Bucket Space supports the core features of a general-purpose bucket, such as data encryption, versioning, bucket policy, and hotlink protection. A Bucket Space can inherit the management settings of a unified template, or you can configure each Bucket Space separately.

    Important

    You cannot access a Bucket Space directly through its standard OSS public domain name. Instead, bind a custom wildcard domain name CNAME to the Agentic Bucket. The public access domain name of each Bucket Space in the Agentic Bucket then takes the form {bucketspace-name}.{base-domain}.

    Limitations

    • Each Alibaba Cloud account is limited to 10 Agentic Buckets per region. By default, each Agentic Bucket can hold 100,000,000 Bucket Spaces. To apply for tens of billions of Bucket Spaces, contact your account manager.

    • The base domain of a wildcard domain name is globally unique and can be bound to only one Agentic Bucket at a time.

    • The base domain of a wildcard domain name must contain at least two domain name labels.

    • The total number of labels in the base domain of a wildcard domain name must not exceed the server-side limit.

    • A base domain with a high-risk top-level domain (TLD) combination cannot be bound. For example, *.com.cn is not allowed.

    • When you bind a certificate to a wildcard domain name CNAME, the CN/SAN of the certificate must match *.{Domain}. You must use a wildcard certificate.

    • When you bind a wildcard domain name CNAME to an Agentic Bucket, do not configure the following fields. Otherwise, OSS returns a 400 error (MalformedXML): AccessPointName, AccessPointNameForObjectProcess, PurgeConfiguration/IsPurgeCdnCache, and ClientCaConfiguration. A general-purpose bucket retains the full functionality of these fields.

    • A Bucket Space does not currently support direct CNAME binding.

    References