I can't say in the general sense, but with GCP you can retrieve the EKpub of a VM's TPM via the control plane, and then use https://github. com/google/go-attestation to verify that an application key is associated with that TPM and hence that VM