Managing data availability on encryption key status changes in replicated storage systems
A method includes obtaining a key status for a first cryptographic key. The first cryptographic key is used to encrypt replicated data of a first replication instance. The method also includes determining, based on the key status, that the first cryptographic key is inaccessible which causes the first replication instance to be unavailable. In response to determining that the first cryptographic key is inaccessible, the method includes scheduling a second replication instance to be unavailable after a threshold amount of time has passed. The second replication instance includes replicated data encrypted by a second cryptographic key that is accessible. After the threshold amount of time has passed and when the first cryptographic key is still inaccessible, the method includes setting the second replication instance as unavailable.
1. A computer-implemented method executed by data processing hardware of a cloud computing environment that causes the data processing hardware to perform operations comprising:
obtaining a first key status for a cryptographic key used to encrypt replicated data of a replication instance of a cloud data warehouse;
determining, based on the first key status, that the cryptographic key is inaccessible to the data processing hardware, the inaccessible cryptographic key causing the replication instance to be unavailable for updates by the data processing hardware;
based on determining that the cryptographic key is inaccessible to the data processing hardware, setting the replication instance as unavailable;
obtaining a second key status for the cryptographic key;
determining, based on the second key status, that the cryptographic key is now accessible to the data processing hardware; and
based on determining that the cryptographic key is now accessible to the data processing hardware, setting the replication instance as available to allow updates to the replication instance by the data processing hardware.
2. The computer-implemented method of claim 1 , wherein the cryptographic key is temporarily inaccessible due to a network outage.
3. The computer-implemented method of claim 1 , wherein the operations further comprise, based on determining that the cryptographic key is inaccessible to the data processing hardware, scheduling a second replication instance to be unavailable after a threshold amount of time has passed.
4. The computer-implemented method of claim 3 , wherein the second replication instance comprises replicated data encrypted by a second cryptographic key.
5. The computer-implemented method of claim 3 , wherein the operations further comprise:
determining that the cryptographic key is now accessible to the data processing hardware before the threshold amount of time has passed; and
based on determining that the cryptographic key is now accessible to the data processing hardware before the threshold amount of time has passed, canceling the schedule for second replication instance to be unavailable after the threshold amount of time has passed.
6. The computer-implemented method of claim 1 , wherein obtaining the second key status for the cryptographic key comprises obtaining the second key status before a threshold amount of time has passed.
7. The computer-implemented method of claim 1 , wherein the operations further comprise storing, in a data store, as replication metadata associated with the replication instance, an indication that the replication instance is inaccessible because the cryptographic key is inaccessible.
8. The computer-implemented method of claim 1 , wherein the cryptographic key is encrypted by a key encryption key (KEK).
9. The computer-implemented method of claim 8 , wherein the data processing hardware does not have access to the KEK.
10. The computer-implemented method of claim 1 , wherein the cryptographic key is stored at a key management service (KMS).
11. A system comprising:
data processing hardware of a cloud computing environment; and
memory hardware in communication with the data processing hardware, the memory hardware storing instructions that when executed on the data processing hardware cause the data processing hardware to perform operations comprising:
obtaining a first key status for a cryptographic key used to encrypt replicated data of a replication instance of a cloud data warehouse;
determining, based on the first key status, that the cryptographic key is inaccessible to the data processing hardware, the inaccessible cryptographic key causing the replication instance to be unavailable for updates by the data processing hardware;
based on determining that the cryptographic key is inaccessible to the data processing hardware, setting the replication instance as unavailable;
obtaining a second key status for the cryptographic key;
determining, based on the second key status, that the cryptographic key is now accessible to the data processing hardware; and
based on determining that the cryptographic key is now accessible to the data processing hardware, setting the replication instance as available to allow updates to the replication instance by the data processing hardware.
12. The system of claim 11 , wherein the cryptographic key is temporarily inaccessible due to a network outage.
13. The system of claim 11 , wherein the operations further comprise, based on determining that the cryptographic key is inaccessible to the data processing hardware, scheduling a second replication instance to be unavailable after a threshold amount of time has passed.
14. The system of claim 13 , wherein the second replication instance comprises replicated data encrypted by a second cryptographic key.
15. The system of claim 13 , wherein the operations further comprise:
determining that the cryptographic key is now accessible to the data processing hardware before the threshold amount of time has passed; and
based on determining that the cryptographic key is now accessible to the data processing hardware before the threshold amount of time has passed, canceling the schedule for second replication instance to be unavailable after the threshold amount of time has passed.
16. The system of claim 11 , wherein obtaining the second key status for the cryptographic key comprises obtaining the second key status before a threshold amount of time has passed.
17. The system of claim 11 , wherein the operations further comprise storing, in a data store, as replication metadata associated with the replication instance, an indication that the replication instance is inaccessible because the cryptographic key is inaccessible.
18. The system of claim 11 , wherein the cryptographic key is encrypted by a key encryption key (KEK).
19. The system of claim 18 , wherein the data processing hardware does not have access to the KEK.
20. The system of claim 11 , wherein the cryptographic key is stored at a key management service (KMS).