Protect your web app with carefully tuned AWS WAF.
Recent revisions are kept. Restoring one creates a new revision.