Abstract: A method of authenticating requests to a cloud service, comprising using one or more edge proxy servers of a container execution system facilitating a cloud service to execute an authentication microservice configured for forwarding, to a login service, each login request received by the edge proxy server, via one or more network, from one or more client devices used by respective users to establish sessions with application(s) executed by application server(s) of the container execution system wherein the login service is configured to authenticate the respective user based on credentials extracted from the login request and create one or more session tokens transmitted to the one or more client device, extracting the session token(s) from each subsequent request received by the edge proxy server from the one or more client devices pertaining to the respective sessions, and authenticating the respective subsequent request by verifying the session token(s).

Abstract: A multi-region cloud service facilitated by a distributed container execution system comprising a plurality of edge proxy servers deployed in a plurality of geographical regions to receive from a plurality of client devices a plurality of requests to access the distributed container execution system and a plurality of application servers deployed in the plurality of geographical regions to provide the cloud service. Each edge proxy server is configured to analyze each request it receives to identify a target geographical region of the respective request, transmit the respective request to the application server(s) deployed in a same geographical region in case the target geographical region is the geographical region of the edge proxy server, and transmit the respective request to other edge proxy server(s) deployed in the target geographical region in case the target geographical region is not the geographical region of the respective edge proxy server.

Abstract: There is provided a computer implemented method encrypting and/or decrypting data, comprising: accessing data for encryption and/or decryption, wherein the data is of a user account of a plurality of user accounts, obtaining an account key in an encrypted state, the account key is obtained from an account key dataset storing at least one encrypted account key for each of the user accounts, providing over the network, the encrypted account key to a key management system(s) (KMS) hosted by a server, receiving over the network, a decrypted account key from the server hosting the KMS(s), wherein the KMS(s) decrypts the encrypted account key using an organization key stored and managed by the KMS(s), storing the decrypted account key in a data storage device set to provide temporary storage for decrypted account keys, and encrypting and/or decrypting the data associated with the user account using the decrypted account key.