The machine need to be reachable from the cloud environment or in other words from the internet.
Therefore there should be a way to have a path to the machine, for example a web server or proxy in the DMZ that is known on the internet.
Can you explain the scenario a lil bit more here ??