Building a HIPAA-Compliant Architecture on AWS, Azure and GCP
What a BAA covers, which services are HIPAA-eligible, and the encryption, access, logging and network controls a PHI workload needs in the cloud.
Building a HIPAA-Compliant Architecture on AWS, Azure and GCP
Coming soon. This post is a placeholder in the US Healthcare learning path. The outline below is what it will cover.
What this post will cover
- The shared responsibility model and the cloud provider’s BAA
- HIPAA-eligible services on AWS, Azure and GCP
- Encryption at rest and in transit, and key management
- Identity, least privilege and break-glass access
- Audit logging and monitoring
- A reference architecture, and HITRUST and SOC 2
Further watching
From the HealthTech Decoded channel:
Where this fits
Level 4 · Health tech engineering & strategy › Health tech engineering
This post is licensed under CC BY 4.0 by the author.