http://docs.aws.amazon.com/en_us/whitepapers/latest/aws-security-incident-response-guide/aws-security-incident-response-guide.html