Cloud-based secure operation of a recovery storage manager

A computer-implemented method comprising:

• by a storage manager that comprises one or more first hardware processors and non-transitory computer-readable memory comprising first computer programming instructions:
• managing backup operations that previously generated a first plurality of backup copies of primary data, which are stored, in a backup format, at one or more data storage resources of a cloud computing environment,
• wherein the primary data was generated, in a primary data format, by a first plurality of client computing devices that are registered as clients of the storage manager, wherein the storage manager comprises a first management database, which comprises first information about a first backup copy among the first plurality of backup copies;
• and
• managing a backup operation that previously generated a backup copy of the first management database;
• and
• by a recovery manager that executes on a first compute resource of the cloud computing environment:
• causing the backup copy of the first management database to be restored to a second management database of the recovery manager, wherein the first information is available from the second management database;
• based on the first information available from the second management database:
• causing the first backup copy to be restored, from the backup format, into restored data in the primary data format, and storing the restored data in a data storage resource of the cloud computing environment;
• and
• causing a recovery client to be configured on a compute resource of the cloud computing environment that is distinct from the recovery manager, wherein the recovery client is registered as a client of the recovery manager, and wherein the recovery client is configured to consume the restored data from the data storage resource of the cloud computing environment,
• wherein the recovery manager is configured to prevent the recovery manager from causing any of the first plurality of backup copies to be restored to any of the first plurality of client computing devices.