1. An apparatus comprising: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to: provide a list of a plurality of cloud orchestrator clients associated with a plurality of cloud provider data centers; responsive to unlocking of an encrypted disk, process an instruction, included in a boot authorization request issued by a cloud orchestrator client of the plurality of cloud orchestrator clients using a remote procedure call comprising the instruction, to change a state of a virtual machine from a first state to a second state; responsive to receiving, from a cloud orchestrator server, an approval response for the boot authorization request, call the remote procedure call comprising the instruction; responsive to the remote procedure call being called, select, from the list, a particular cloud orchestrator client of the plurality of cloud orchestrator clients that is associated with a particular cloud provider data center of the plurality of cloud provider data centers where the virtual machine currently resides; and responsive to a determination that changing the state of the virtual machine from the first state to the second state is authorized by a finite state diagram indicating a plurality of allowed states for the virtual machine and a plurality of allowed transitions between the plurality of allowed states: generate a request instructing the particular cloud orchestrator client to change the state of the virtual machine from the first state to the second state; communicate the request to the particular cloud orchestrator client; and receive, from the particular cloud orchestrator client, an indication of whether the state of the virtual machine was successfully changed.