validating virtual machine host automatically with fingerprint and something else
I've been researching various methods to validate a remote ssh server (virtual machine) automatically and remotely. They all seem to have the same conclusion...namely that the host key needs to be verified through some sort of a secure channel (offline, through a control panel over TLS, or whatever).
Since most cloud vendors seem to provide an API mechanism for executing code during VM setup (thereby transmitted via TLS for example), would it be an improvement to security to have the cloud vendor write a UUID or some other long randomized key or string to the file system which I could check after authenticating with a key pair?
Does this add any value, or is it just obfuscation? Does anything change if I were to not use DNS hostnames at all?
My main goal is to avoid the maintenance of infrastructure...is this type of thing even possible then?