The obvious solution is to use a cloud security camera! It might even be showing a real server rack somewhere.
Can you trust the security camera isn’t breached and not showing a false stream?
Pretty much the plot of every single bank heist movie.
...and many of the cloud providers with HSM-backed services (Azure KeyVault, AWS KMS) don't give you any verifiable proof. At least with GCP you can download the attestations and verify them with the HSM vendor. With Azure you pay more for HSM-backed keys with no evidence the HSM exists or is in use. Trust, but verify.