HIPAA Compliance on AWS

Checklist

Published November 2024

x

Healthcare companies often struggle to understand their compliance responsibilities in public cloud. Who is responsible for which aspects of compliance? Can healthcare companies trust Amazon with their mission-critical apps and sensitive data? What are the rules and boundaries for AWS compliance?

The goal of this checklist is to help provide guidance on specific controls and tools to use in AWS that help maintain compliance with HIPAA standards. Wherever possible, we also provide a link to relevant AWS documentation and the specific HIPAA requirement. Following this checklist does not guarantee HIPAA compliance.