Recover

AWS Security Incident Response provides you guidance to help restore systems to normal operation, confirm they are functioning properly, and remediate any vulnerabilities to prevent similar events in the future. AWS Security Incident Response does not directly help with recovery of systems. Key considerations include:

• Are the affected systems patched and hardened against the recent attack?

• What is the feasible timeline to restore the systems to production?

• What tools will you use to test, monitor, and verify the restored systems?