Secure our AWS server from hacking

The MySQL database on our AWS server was recently hacked with ransomware. We need someone familiar with AWS and security to get our site scanned for any residual malware and secure it from further attacks. This server is used to maintain a database and a web site that we use. The database and website should remain accessible via the internet but secured in a way that will only allow access to appropriate people and hidden or otherwise inaccessible from others. The solution(s) should be the least impactful as possible to the application and users that need to connect to the server and access the data while still offering enough security to thwart any future attacks. 1. Examine sever for any residual malware or ransomware that needs to be removed 2. Make MySQL security recommendations to make more secure 3. Examine server security, make suggestions on some appropriate actions we can take and apply those changes with approvals from our management team. Please provide best practice as well as alternatives to those. The goal is to get have the most secure approach while not disrupting the current user access too much.