Secure in-memory database in container

A method comprising:

• storing an in-memory database management application inside of an enclave inside of a first container in a container-based cloud service, wherein the enclave utilizes central processing unit (CPU)-specific software instructions to shield data from software outside the enclave;
• storing an instance of an in-memory database inside of a second container but outside of an enclave inside the second container;
• storing sensitive data from the in-memory database inside the enclave inside the second container;
• receiving, from one or more clients, a command necessitating access to the in-memory database;
• and
• passing the command to the application stored inside the enclave in the first container, causing the application to issue a command to access the in-memory database in the second container.

A non-transitory machine-readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• storing an in-memory database management application inside of an enclave inside of a first container in a container-based cloud service, wherein the enclave utilizes central processing unit (CPU)-specific software instructions to shield data from software outside the enclave;
• storing an instance of an in-memory database inside of a second container but outside of an enclave inside the second container;
• storing sensitive data from the in-memory database inside the enclave inside the second container;
• receiving, from one or more clients, a command necessitating access to the in-memory database;
• and
• passing the command to the application stored inside the enclave in the first container, causing the application to issue a command to access the in-memory database in the second container.