AWS Details HIPAA Deployment Requirements for Amazon Quick

AWS published a guide for deploying Amazon Quick in healthcare workflows involving protected health information (PHI), emphasizing that HIPAA eligibility does not make a customer’s deployment compliant. AWS says eligibility covers Quick’s web, desktop, and mobile clients, subject to configuration and shared responsibility. However, only the web version provisioned through the AWS Management Console can be covered by a signed business associate agreement (BAA) through AWS Artifact—a necessary component for HIPAA-compliant workflows involving PHI. The Free and Plus paths do not offer a BAA. The guide assigns customers responsibility for configuring safeguards, including encryption keys, identity controls, document access, agent permissions, and audit logging, with separate controls for structured and unstructured data. Customer-managed encryption keys require an Enterprise subscription. AWS recommends validating safeguards before expanding from workflows without PHI to PHI-adjacent workflows.

Generated by AI from reports · Updated 58 minutes ago

There is not enough continuous observation data to plot a trend yet.