How Youzan Leveraged Alibaba Cloud FC Sandbox to Build an Enterprise AI Agent Platform

Customer Background

Youzan, a leading Chinese SaaS provider for merchants, saw growing demand for customized AI services across marketing automation, intelligent customer service, and internal efficiency, leading multiple teams to build numerous AI Agents using Dify and low‑code solutions.

Requirements and Challenges

The scattered agents suffered from lack of unified management, duplicated infrastructure, and high operational cost. Specific challenges included:

Runtime security isolation : Agents execute untrusted model‑generated code; strong multi‑tenant isolation and fine‑grained permission control were needed to prevent cross‑agent breaches.

Unified resource governance : Six dimensions—runtime environment, session, storage, network, permissions, observability—required consistent control to avoid security incidents and cost overruns.

Elasticity vs. cost : Agent workloads show sharp diurnal peaks; a “pay‑only‑when‑requested, seconds‑level scaling” capability was essential.

Infrastructure duplication : Each team rebuilding sandboxing, auth, monitoring, etc., caused fragmented tech stacks and maintenance burden.

Smooth migration of existing assets : Thousands of Dify‑based workflows and low‑code agents needed to be migrated without a complete rewrite.

Implementation Approach

After several PoC cycles, Youzan selected a hybrid architecture: a self‑developed business platform built on top of Alibaba Cloud Function Compute (FC) Cloud Sandbox as the runtime base.

The core idea was to reuse Alibaba Cloud’s mature serverless, security, and observability capabilities while the internal team focused on differentiated business logic.

Key Benefits Delivered

Extreme Elasticity

FC’s serverless model lets instances shrink to zero when idle, providing true “pay‑per‑request”. Cold‑start latency is reduced to milliseconds via image pre‑warming, enabling the platform to handle e‑commerce traffic spikes.

Deep Six‑Dimensional Security Isolation

The sandbox offers:

Runtime environment isolation (MicroVM level)

Session isolation – one function instance serves a single session and is destroyed afterward

Storage isolation – dynamic per‑session storage with automatic cleanup

Network isolation – no default public egress, VPC security groups and ACLs, domain/IP whitelisting

Permission isolation – function‑level policies, short‑term STS tokens or rotating long‑term tokens

Observability & audit – sandbox‑level logs and monitoring for full traceability

Out‑of‑the‑Box Engineering Components

FC provides built‑in logging, tracing, request monitoring, model management, and a Skills marketplace, which would otherwise require months of in‑house development.

Open Compatibility and Smooth Migration

FC’s function service supports Dify DSL import and conversion, allowing existing workflows to be transferred without breaking changes. New agents can be created, updated, and gray‑released through CI/CD pipelines, ensuring “migration without downtime, incremental development without lock‑in”.

Results

Since adopting FC Cloud Sandbox, Youzan has deployed over 190 standardized agent templates covering marketing, customer service, data analysis, and internal productivity. Approximately 87 % of agent resources remain in a low‑cost sleep state during off‑peak hours, dramatically reducing compute expenses compared with always‑on instances. Development effort now concentrates on business logic, and the platform has passed internal security assessments, positioning it for external merchant use.