Serverless App Engine:Prerequisites

Step 1: Activate service and grant permissions

Activate the SAE service before you begin. SAE is free to activate, and you are charged based on actual usage after activation. SAE supports pay-as-you-go and resource plan billing. For more information, see Billing overview.

1. Go to the product page of SAE.

2. Click Buy Now.

3. On the Log On page, enter your Alibaba Cloud account and password, and then click Log On.

4. On the Serverless App Engine page, select I have read and agree to the Serverless App Engine Terms of Service, and then click Activate Now.

5. On the Activated. page, click Console. In the Welcome to Serverless App Engine (SAE) dialog box, click Confirm.

(Required for RAM users) Step 2: Grant permissions

The first time you sign in to the SAE console as a RAM user, SAE displays the Welcome to Serverless App Engine (SAE) dialog box and prompts you to grant the RAM user access to required Alibaba Cloud resources. For more information, see Grant permissions to a RAM user.

The dialog box lists the required permission policies, including AliyunSLBReadOnlyAccess (read-only access to Server Load Balancer (SLB)), AliyunACMFullAccess (manage Application Configuration Management (ACM)), AliyunECSReadOnlyAccess (read-only access to Elastic Compute Service (ECS) for selecting a security group when creating an application), AliyunOOSReadOnlyAccess (read-only access to Operation Orchestration Service (OOS) for scheduled batch start and stop), AliyunBSSReadOnlyAccess (read-only access to Billing Management for viewing remaining resource plan quota), AliyunARMSReadOnlyAccess (read-only access to Application Real-Time Monitoring Service (ARMS) for application monitoring), AliyunRAMReadOnlyAccess (read-only access to RAM for querying the permission list), AliyunCloudMonitorReadOnlyAccess (read-only access to CloudMonitor for basic monitoring), AliyunContainerRegistryReadOnlyAccess (read-only access to Container Registry), AliyunALBReadOnlyAccess (read-only access to Application Load Balancer (ALB)), AliyunYundunCertReadOnlyAccess (read-only access to SSL Certificates Service), and AliyunEventBridgeReadOnlyAccess (read-only access to EventBridge for creating and updating jobs). After you review the permissions, click Acknowledge and Do Not Remind Again.

Step 3: Create a VPC

A VPC provides a fully isolated network environment for your applications. Applications within the same VPC can communicate with each other, improving network-level security. For more information, see Create and manage a VPC.

Step 4: Create a namespace

A namespace provides a logically isolated runtime environment for application service calls and distributed configuration pushes. If you have multiple environments such as development, testing, and production, create a separate namespace for each to manage applications independently, start or stop them with a single click, and improve security.

1. Log on to the SAE console. In the left-side navigation pane, click Namespace. In the top navigation bar, select the target region.

2. On the Namespace page, click Create Namespace.

3. In the Create Namespace panel, configure the following parameters and click OK.

   Parameter	Description	Example
   Namespace Name	A custom name for the namespace.	test
   Namespace ID	The prefix is determined by the selected region and cannot be changed. For example, the prefix for the China (Shenzhen) region is cn-shenzhen. You can specify a custom suffix. The Namespace ID cannot be changed after creation.	demo
   Description	A custom description for the namespace.	For testing purposes.
   VPC	Select an existing VPC. A namespace can be associated with only one VPC, but a single VPC can be associated with multiple namespaces. After a namespace is created, you can switch its associated VPC. Note Before switching the VPC for a namespace, you must delete all applications within it.	vpc-wz9i4zexkzbqceo5n****