External key manager error handling for encrypted platform-hosted data

A database management system comprising one or more processors, the one or more processors configured to:

• maintain, a database encrypted using an external key managed by an external key manager;
• receive, an indication that the external key is unavailable;
• initiate, an observation period for a predetermined period of time;
• during the observation period, poll the external key manager to determine whether the external key is available;
• and
• determine that the external key was not available during the observation period, and in response, unload the database after the end of the observation period, wherein in maintaining the database, the one or more processors are configured to:
• restart the database management system during the observation period;
• save remaining time of the observation period at a time of restarting the database and a status of the external key as of a last poll during the observation period and prior to restarting the database management system;
• and
• resume the observation period and the polling from the remaining time after the database management system is restarted.

One or more non-transitory computer-readable storage media storing instructions that when executed by one or more processors, causes the one or more processors to perform operations comprising:

• maintaining a database encrypted using an external key managed by an external key manager;
• receiving an indication that the external key is unavailable;
• initiating an observation period for a predetermined period of time;
• during the observation period, polling the external key manager to determine whether the external key is available;
• and
• determining that the external key was not available during the observation period, and in response, unloading the database after the end of the observation period, wherein maintaining the database comprises:
• restarting a database management system comprising the one or more processors during the observation period;
• saving remaining time of the observation period at a time of restarting the database and a status of the external key as of a last poll during the observation period and prior to restarting the database management system;
• and
• resuming the observation period and the polling from the remaining time after the database management system is restarted.