Virus Scan for Amazon S3 in AWS European Sovereign Cloud

We are happy to announce, that bucketAV is now available in the AWS European Sovereign Cloud (EUSC). bucketAV protects Amazon S3 from viruses, trojans, ransomware and other kinds of malware. The European Sovereign Cloud is an indepentent partition of the AWS cloud, currently consisting of one region in Brandenburg (Germany) called eusc-de-east-1 and two availability zones.

bucketAV powered by ClamAV is available for launch. We are also working on making bucketAV powered by Sophos available in the EUSC, but are still waiting for AWS to bring metered billing to the AWS Marketplace EUSC.

Why scan Amazon S3 for viruses and malware?

Here are three reasons, why you should add virus and malware protection to your S3 buckets right away.

1. User uploads Validating user input is crucial. Whenever users are able to upload files, you definetly should scan them for viruses and malware. As users might accidentially upload infected files or attackers might use the upload mechanism to inject malware into your systems.
2. 3rd party data processing Are 3rd parties uploading data directly to your S3 buckets? Avoid malware from entering your systems by scanning all incoming files for viruses, trojans, and ransomware.
3. Monitor security Scanning your S3 buckets continuously gives you visibility into attack patterns and helps you identify which data sources are most targeted. This enables your security team to respond proactively.

How does bucketAV for Amazon S3 in the AWS European Sovereign Cloud work?

The following figure illustrates how realtime scanning works.

1. User uploads file to S3 bucket.
2. S3 triggers scan by sending event to SQS.
3. Fleet of EC2 instances running bucketAV listens for new jobs.
4. bucketAV downloads and scans the S3 object.
5. bucketAV publishes the scan result to an SNS topic.
6. Add-ons are processing the scan results, e.g., move infected files to a quarantine bucket.

How to setup virus scanning for Amazon S3 in the AWS European Sovereign Cloud?

1. Create a subscription via the AWS Marketplace (EUSC)
2. Deploy the CloudFormation stack provided by bucketAV
3. Enable realtime or scheduled scanning for Amazon S3
4. Deploy add-ons to quarantine infected files, send weekly reports, … (optional)

For more details, please refer to our setup guide for AWS European Sovereign Cloud (EUSC).

Summary

bucketAV brings proven antivirus protection for Amazon S3 to the AWS European Sovereign Cloud. With real-time scanning powered by ClamAV, you can detect and neutralize malware before it impacts your users, systems, or compliance posture—all within the data residency boundaries of the EUSC.

Getting started takes just a few minutes: subscribe via the AWS Marketplace, deploy a single CloudFormation stack, and your S3 buckets are protected.

Get started with bucketAV in the AWS European Sovereign Cloud