Alibaba Cloud FC3
How to automatically deploy SSL certificates to Alibaba Cloud Function Compute 3.0 (FC3) custom domains.
Overview
AutoSSL can automatically deploy SSL certificates to your Alibaba Cloud Function Compute 3.0 (FC3) custom domains. It securely updates the custom domain configuration with the latest certificate, ensuring uninterrupted HTTPS access.
For instructions on how to manage and run this deployment, please refer to the Deployment Management section.
Configuration Parameters
When you add or edit this deployment target in the AutoSSL console, you will need to configure the following parameters:
| Parameter | Description | Example |
|---|---|---|
| Region | The Alibaba Cloud Region where your FC3 custom domain is located. | us-west-1 |
| Domains | A list of custom domains you want to protect. Must be valid domain names. | ['www.autossl.dev', 'dev.autossl.dev'] |
Note on Domains
Domain names cannot overlap or repeat (e.g. www.autossl.dev and
*.autossl.dev might conflict if not handled properly, and the UI will warn
against overlapping wildcards).
How it Works
When AutoSSL deploys a certificate to an Alibaba Cloud FC3 custom domain (e.g., www.autossl.dev in the us-west-1 region), it performs the following steps:
- Domain Validation: Checks if the provided SSL certificate actually covers the target custom domains (e.g.
www.autossl.dev). If a domain is not protected by the certificate, the deployment for that domain is skipped to avoid service unavailability. - Configuration Update:
- Connects to the Alibaba Cloud FC3 API to retrieve the existing custom domain configuration.
- Updates the custom domain with the new certificate and private key.
- If the custom domain's protocol is currently set to
HTTPonly, it will be automatically upgraded to support bothHTTPandHTTPS.
Access Key Requirement
To interact with the Alibaba Cloud API, this provider requires an Alibaba Cloud Access Key.
Required Permissions
The Access Key must belong to a RAM user with permissions to read and update FC3 custom domains.
You need to attach a custom policy to your RAM user with at least the following actions:
fc:GetCustomDomainfc:UpdateCustomDomain
For more information on how to manage RAM permissions, please refer to the Alibaba Cloud RAM Policy Documentation.