Secure execution environment services

A system, comprising:

• at least one computing device that:
• receives an application programming interface request to instantiate a secure execution environment;
• and
• fulfills the application programming interface request by sending, to a target computer system, a provisioning request, the provisioning request specifying a configuration for the secure execution environment, the target computer system selected based at least in part on the target computer system being operable to instantiate the secure execution environment;
• provides, into the secure execution environment, one or more executable instructions to cause a cryptographic measurement of the secure execution environment to be provided;
• receives, from the secure execution environment, the cryptographic measurement of the secure execution environment calculated by causing at least a portion of the one or more executable instructions to be executed within the secure execution environment while at least one application is loaded in the secure execution environment;
• and
• validates the secure execution environment based at least in part on the cryptographic measurement of the secure execution environment;
• validates the at least one application loaded in the secure execution environment using one or more cryptographic measurements of the at least one application made from within the secure execution environment;
• and
• provides, to a device associated with the application programming interface request, a first validation result, the first validation result based at least in part on the one or more cryptographic measurements of the at least one application.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of execution by one or more processors of a computer system, cause the computer system to at least:

• receive an application programming interface request for a secure execution environment;
• and
• fulfill the application programming interface request by at least:
• selecting a target computer system from a plurality of target computer systems, the target computer system selected based at least in part on the target computer system being operable to instantiate the secure execution environment;
• and
• sending a provisioning request to the target computer system to cause the secure execution environment to be instantiated on a processor of the target computer system;
• validate the secure execution environment, with at least one application loaded in the secure execution environment, using one or more cryptographic measurements of the secure execution environment calculated by the processor of the target computer system;
• validate the at least one application loaded in the secure execution environment using one or more cryptographic measurements of the at least one application made from within the secure execution environment;
• and
• provide, to a device associated with the application programming interface request, a first validation result, the first validation result based at least in part on the one or more cryptographic measurements of the at least one application.