I’m having the same issue in my organization but we are not authorized to do enterprise hosting. I am told the site will be shutdown if we do not find a solution.
Where are the files uploaded in Discourse and could an install on AWS leverage antiviruses to scan these locations in real time?