Also, public cloud machines come with IPs of well known ranges. It may be easy to spot them if required.

On the other side, this is the approach that I'm currently using, without any problem for my particular case.