Hybrid Cloud for Architects

Implementing the controls on AWS – public cloud

Since the administrative controls have been taken care of in a common fashion, we will deal with physical controls.

Since the public cloud is technically AWS's data center, the physical controls fall under the responsibility of AWS itself. AWS has certification on HIPAA for a list of services, which can be used and will clear the HIPAA requirements.

At the time of writing this book, 43 services out of hundreds of AWS services are eligible for HIPAA compliance. Refer to the updated list at https://aws.amazon.com/compliance/hipaa-eligible-services-reference/.

We can use these services and architect the application, and they can still be HIPAA-compliant. 

FAQs on HIPAA on AWS: https://aws.amazon.com/blogs/security/frequently-asked-questions-about-hipaa-compliance-in-the-aws-cloud/ ...