A system associated with a cloud computing environment, comprising: a plurality of nodes (531, 532, 533, 631, 632, 633); a proxy platform data store (220, 421, 900) containing node data associated with nodes (531, 532, 533, 631, 632, 633) of the cloud computing environment, each node (531, 532, 533, 631, 632, 633) storing multi-party computation information; and a proxy platform (210, 411) able to access the proxy platform data store (220, 421, 900), including: a computer processor, and computer memory, coupled to the computer processor, storing instructions that, when executed by the computer processor cause the processor to: (i) detect that a first node (531, 631) of the plurality of nodes (531, 532, 533, 631, 632, 633) needs to access a cloud application secret key, (ii) determine, based on information in the proxy platform data store (220, 421, 900), a set of nodes (531, 532, 533, 631, 632, 633) among the plurality of nodes (531, 532, 533, 631, 632, 633) associated with the secret key that the first node (531, 631) needs to access, (iii) use a multi-party computation algorithm (228, 908) and information received from the set of nodes (531, 532, 533, 631, 632, 633) to generate the secret key, and (iv) store the generated secret key in a secure enclave at the proxy platform for some period and then evict the generated secret key. a plurality of nodes (531, 532, 533, 631, 632, 633); a proxy platform data store (220, 421, 900) containing node data associated with nodes (531, 532, 533, 631, 632, 633) of the cloud computing environment, each node (531, 532, 533, 631, 632, 633) storing multi-party computation information; and a proxy platform (210, 411) able to access the proxy platform data store (220, 421, 900), including: a computer processor, and computer memory, coupled to the computer processor, storing instructions that, when executed by the computer processor cause the processor to: (i) detect that a first node (531, 631) of the plurality of nodes (531, 532, 533, 631, 632, 633) needs to access a cloud application secret key, (ii) determine, based on information in the proxy platform data store (220, 421, 900), a set of nodes (531, 532, 533, 631, 632, 633) among the plurality of nodes (531, 532, 533, 631, 632, 633) associated with the secret key that the first node (531, 631) needs to access, (iii) use a multi-party computation algorithm (228, 908) and information received from the set of nodes (531, 532, 533, 631, 632, 633) to generate the secret key, and (iv) store the generated secret key in a secure enclave at the proxy platform for some period and then evict the generated secret key. a computer processor, and computer memory, coupled to the computer processor, storing instructions that, when executed by the computer processor cause the processor to: (i) detect that a first node (531, 631) of the plurality of nodes (531, 532, 533, 631, 632, 633) needs to access a cloud application secret key, (ii) determine, based on information in the proxy platform data store (220, 421, 900), a set of nodes (531, 532, 533, 631, 632, 633) among the plurality of nodes (531, 532, 533, 631, 632, 633) associated with the secret key that the first node (531, 631) needs to access, (iii) use a multi-party computation algorithm (228, 908) and information received from the set of nodes (531, 532, 533, 631, 632, 633) to generate the secret key, and (iv) store the generated secret key in a secure enclave at the proxy platform for some period and then evict the generated secret key. (i) detect that a first node (531, 631) of the plurality of nodes (531, 532, 533, 631, 632, 633) needs to access a cloud application secret key, (ii) determine, based on information in the proxy platform data store (220, 421, 900), a set of nodes (531, 532, 533, 631, 632, 633) among the plurality of nodes (531, 532, 533, 631, 632, 633) associated with the secret key that the first node (531, 631) needs to access, (iii) use a multi-party computation algorithm (228, 908) and information received from the set of nodes (531, 532, 533, 631, 632, 633) to generate the secret key, and (iv) store the generated secret key in a secure enclave at the proxy platform for some period and then evict the generated secret key.