Centralized access to data repository from a multi-cloud computing environment

A computer-implemented method, comprising:

• intercepting, at a gateway controller, a first request from an endpoint to access a web-based repository service accessible through a public network, the gateway controller and the endpoint being within a private network , the gateway controller configured to prevent unencrypted requests to access the web-based repository from exiting the private network and/or entering the public network by at least intercepting the unencrypted requests, and the endpoint being associated with a first cloud platform;
• verifying, by the gateway controller, the first request to determine, based at least on an header of the first request and/or an Internet Protocol (IP) address of the endpoint, whether the endpoint is authorized to access the web-based repository service to store and/or retrieve a data associated with the first request;
• upon the gateway controller successfully verifying the first request, sending, by the gateway controller and to the endpoint, a redirect request to a reverse proxy at the gateway controller, the redirect request including the first request, and the redirect request configured to be forwarded by the endpoint to the reverse proxy;
• responding, by the reverse proxy at the gateway controller, to the redirect request from the endpoint by at least accessing, on behalf of the endpoint, the web-based repository service to store and/or retrieve the data associated with the first request, the web-based repository service being accessed by the reverse proxy translating the first request from an unencrypted request to an encrypted second request, and sending, to the web-based repository service via the public network, the encrypted second request corresponding to the first request;
• storing, in a cache associated with the gateway controller, at least a portion of data retrieved from the web-based repository service;
• and
• intercepting, at the gateway controller, a third request from the endpoint to access the web-based repository service prior to the third request exiting the private network and/or entering the public network in order to confine the third request within the private network, the gateway controller responding to the third request by at least accessing the cache prior to accessing the web-based repository service, and the gateway controller using at least the portion of the data stored in the cache to respond to the third request.

A non-transitory computer readable medium storing instructions, which when executed by at least one data processor, result in operations comprising:

• intercepting, at a gateway controller, a first request from an endpoint to access a web-based repository service accessible through a public network, the gateway controller and the endpoint being within a private network-, the gateway controller configured to prevent unencrypted requests to access the web-based repository from exiting the private network and/or entering cntcr the public network by at least intercepting the unencrypted requests, and the endpoint being associated with a first cloud platform;
• verifying, by the gateway controller, the first request to determine, based at least on an header of the first request and/or an Internet Protocol (IP) address of the endpoint, whether the endpoint is authorized to access the web-based repository service to store and/or retrieve a data associated with the first request;
• upon the gateway controller successfully verifying the first request, sending, by the gateway controller and to the endpoint, a redirect request to a reverse proxy at the gateway controller, the redirect request including the first request, and the redirect request configured to be forwarded by the endpoint to the reverse proxy;
• responding, by the reverse proxy at the gateway controller, to the redirect request from the endpoint by at least accessing, on behalf of the endpoint, the web-based repository service to store and/or retrieve the data associated with the first request, the web-based repository service being accessed by the reverse proxy translating the first request from an unencrypted request to an encrypted second request, and sending, to the web-based repository service via the public network, the encrypted second request corresponding to the first request;
• storing, in a cache associated with the gateway controller, at least a portion of data retrieved from the web-based repository service;
• and
• intercepting, at the gateway controller, a third request from the endpoint to access the web-based repository service prior to the third request exiting the private network and/or entering the public network in order to confine the third request within the private network, the gateway controller responding to the third request by at least accessing the cache prior to accessing the web-based repository service, and the gateway controller using at least the portion of the data stored in the cache to respond to the third request.