Input/output fencing of a shared cloud storage volume

A system comprising:

• a first node and a second node executing on a cloud computing platform;
• wherein program code of the first node and the second node, when executed by computing resources of the cloud computing platform including at least one central processing unit, causes the computing resources to:
• share at least one cloud storage volume between a first node and a second node executing on a cloud computing platform;
• in response to detection, by the first node, of a condition indicating that the second node has possibly failed, change information associated with the second node, through an interface of the cloud computing platform and without communicating with the second node, wherein the information associated with the second node comprises an encryption key associated with the second node that is currently being used to encrypt communications between the second node and the shared cloud storage volume, and wherein the change of the information associated with the second node prevents the second node from subsequently accessing the shared cloud storage volume;
• storing, within the second node for use by the second node, a first copy of the encryption key associated with the second node;
• storing, external to the second node and for use on behalf of the shared cloud storage volume, a second copy of the encryption key associated with the second node;
• and
• wherein changing the information associated with the second node comprises changing the second copy of the encryption key associated with the second node.

A computer program product including a non-transitory computer readable medium having instructions stored thereon, wherein the instructions, when executed on processing circuitry, cause the processing circuitry to perform steps including:

• sharing at least one cloud storage volume between a first node and a second node executing on a cloud computing platform;
• in response to detecting, by the first node, a condition indicating that the second node has possibly failed, changing information associated with the second node, through an interface of the cloud computing platform and without communicating with the second node, wherein the information associated with the second node comprises an encryption key associated with the second node that is currently being used to encrypt communications between the second node and the shared cloud storage volume, and wherein changing the information associated with the second node prevents the second node from subsequently accessing the shared cloud storage volume;
• storing, within the second node for use by the second node, a first copy of the encryption key associated with the second node;
• storing, external to the second node and for use on behalf of the shared cloud storage volume, a second copy of the encryption key associated with the second node;
• and
• wherein changing the information associated with the second node comprises changing the second copy of the encryption key associated with the second node.