A Reference Architecture for Cyber Resilience: Cohesity and AWS
Cohesity, Wednesday, October 28th, 2026
Cohesity describes a five-layer reference architecture on AWS for ransomware recovery using immutable backups, a cyber vault and clean room recovery.
This Cohesity vendor post argues that recovering from destructive attacks requires validating restored workloads, since dormant malware can cause repeated reinfection.
The architecture has five layers: production workload protection with immutable backups, threat detection and anomaly monitoring, an air-gapped cyber vault, an isolated clean room recovery environment on AWS, and recovery validation pipelines.
Restored workloads are treated as untrusted until scanned and verified, using AWS services such as Inspector, CloudTrail, CloudWatch, VPC Flow Logs and KMS.
Elastic AWS infrastructure lets recovery environments be provisioned on demand.