hipaa-compliance-guard

Auditing HIPAA safeguards involves scanning infrastructure configurations to identify gaps in encryption, logging, and access controls. This Skill assesses Terraform and CloudFormation templates across AWS, GCP, or Azure to verify encryption and audit logging presence.

No, this HIPAA compliance audit does not inspect PHI data. It evaluates infrastructure configuration patterns for encryption and logging presence to ensure privacy while reviewing cloud environments like AWS, GCP, or Azure.

Yes, you can use this to check Terraform configurations for HIPAA encryption requirements. It scans infrastructure as code to verify encryption in transit at load balancers and S3 bucket encryption at rest.

To start a pre-audit self-assessment for healthcare infrastructure, you need to provide your project root directory and cloud provider. The audit then returns a structured compliance score and actionable findings.

A key limitation is that it assesses configuration patterns without inspecting actual ePHI data. It focuses strictly on verifying encryption and audit logging presence within AWS, GCP, or Azure infrastructure configurations.