You can condition IAM on Nitro attestation, so that's doable (if a lot more work than usual).