Protecting virtual machine data in cloud environments

A non-transitory computer readable storage medium comprising program instructions executable to:

• receive a request for application data, wherein
• the application data is encrypted,
• the request is received at an encryption virtual machine, and
• the encryption virtual machine is configured to receive the request from a plurality of application virtual machines via a plurality of loaders;
• access a map file to identify an application virtual machine of the plurality of application virtual machines for which the application data is requested;
• access the application data in a storage volume, wherein
• the storage volume is communicatively coupled to the encryption virtual machine, and
• the encryption virtual machine is coupled between the plurality of application virtual machines and the storage volume,
• receive the application data from the storage volume, wherein
• the application data is decrypted at the encryption virtual machine to produce decrypted application data;
• and
• send the decrypted application data to the plurality of loaders.

A system comprising:

• one or more hardware processors;
• and
• a memory coupled to the one or more hardware processors, wherein the memory stores program instructions executable by the one or more hardware processors to:
• receive a request for application data, wherein
• the application data is encrypted,
• the request is received at an encryption virtual machine, and
• the encryption virtual machine is configured to receive the request from a plurality of application virtual machines, via a plurality of loaders;
• access a map file to identify an application virtual machine of the plurality of application virtual machines for which the application data is requested;
• access the application data in a storage volume, wherein
• the storage volume is communicatively coupled to the encryption virtual machine, and
• the encryption virtual machine is coupled between the plurality of application virtual machines and the storage volume,
• receive the application data from the storage volume, wherein
• the application data is decrypted at the encryption virtual machine to produce decrypted application data;
• and
• send the decrypted application data to the plurality of loaders.