Web services in secure execution environments

A system, comprising:

• at least one computing device that:
• instantiates a first secure execution environment, the first secure execution environment being configured to enforce encryption of memory writes generated within the first secure execution environment such that access to memory of the first secure execution environment requires a cryptographic key protected by the first secure execution environment;
• executes a bootloader within the first secure execution environment that includes instructions that, when executed by the bootloader, implement, within the first secure execution environment, a service endpoint of a service;
• receives, from a client of the service, a first request for access to the service endpoint;
• performs, in the first secure execution environment, one or more operations for fulfilling the first request;
• and
• provides, to the client, a response to the first request based at least in part on the one or more operations for fulfilling the first request.

A computer-implemented method comprising:

• under the control of one or more computer systems of a computing resource service provider, the one or more computer systems configured with executable instructions,
• implementing, by a bootloader executing within a secure execution environment, a service endpoint of a service provided by the computing resource service provider, the secure execution environment being configured to enforce encryption of memory writes generated within the secure execution environment such that access to memory of the secure execution environment requires a cryptographic key protected by the secure execution environment;
• receiving, from a client, a request for access to the service endpoint;
• and
• fulfilling the request by executing, within the secure execution environment, a set of executable instructions based at least in part on the request for access to the service endpoint.