We use AWS AMI which is patched regularly against malware attacks. We also use Amazon Cloudfront for protection against DDoS attacks. Yarris turns on s3 scanning by third party virus scanner before you commence the project.