skills.rest
the-momentum
the-momentumOFFICIAL
Explore all skills by this author →
Website𝕏@themomentum_aiGitHub

hipaa-compliance

Implement HIPAA-compliant AWS patterns for PHI workloads with encryption and audit logging.

91|7|Updated Oct 3, 2024
Search Tags:#development#security#aws#audit#compliance#hipaa#phi
One-click install
npx skills add https://github.com/the-momentum/healthstack --skill hipaa-compliance-the-momentum
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hipaa-compliance
Source: https://github.com/the-momentum/healthstack/tree/main/.claude/skills/hipaa
Command: npx skills add https://github.com/the-momentum/healthstack --skill hipaa-compliance-the-momentum

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

HIPAA compliance challenges in healthcare software require robust governance, encryption, access controls, and audit-ready infrastructure on AWS. This skill provides architectural patterns and best practices to build PHI-safe systems and to review code for PHI exposure.

Core Features & Use Cases

  • Guidance on HIPAA-eligible AWS services, encryption defaults, and audit logging
  • Patterns for minimum-necessary access, RBAC, and secure API design
  • Real-world examples for PHI data handling, de-identification, and breach response

Quick Start

Describe a HIPAA-compliant architecture for a healthcare SaaS project and begin implementing with a compliant AWS baseline.

Frequently Asked Questions about hipaa-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a HIPAA-compliant architecture for healthcare SaaS on AWS?▼

Build a HIPAA-compliant AWS architecture by selecting HIPAA-eligible services, enforcing encryption defaults, implementing minimum-necessary RBAC, and configuring audit logging for PHI workloads.

What AWS services are eligible for storing and processing PHI under HIPAA?▼

PHI processing requires HIPAA-eligible AWS services configured with encryption defaults, strict access controls, and audit logging, ensuring infrastructure is audit-ready for healthcare compliance reviews.

How do I de-identify patient records in development environments?▼

De-identify patient records in development environments by applying patterns that remove or mask PHI, ensuring development and testing workflows adhere to HIPAA minimum necessary access practices.

Do I need a BAA when building AWS workloads that process HL7 or FHIR data?▼

A BAA is required for AWS workloads processing HL7 or FHIR data containing PHI, establishing compliance boundaries for access control, encryption, and audit logging responsibilities.

What is the best way to implement minimum-necessary access for PHI workloads?▼

Implement minimum-necessary access for PHI workloads using RBAC patterns and secure API design, ensuring users and services only access the protected health information strictly required.

How do I set up audit logging for AWS PHI workloads to pass compliance reviews?▼

Set up audit logging for AWS PHI workloads by enabling tracking configurations on eligible services, capturing access events and data handling to ensure audit-ready infrastructure for risk analysis.

Related Skills

Explore More Legal & Compliance Skills→
Benmore-StudioBenmore-Studio
1

hipaa-compliance-guard

Audits HIPAA technical safeguards in healthcare infrastructure configurations across AWS, GCP, or Azure.

Official
Intermediate
proffesor-for-testingproffesor-for-testing
436

compliance-testing

Map GDPR, HIPAA, PCI-DSS, SOC 2, and CCPA regulations to testable controls.

Community
Advanced
mattwyskielmattwyskiel
1

aws-iam

Generate AWS IAM policies and manage roles for Lambda, Glue, and CloudTrail.

Community
Advanced
DexploarerDexploarer
7

compliance-auditor

Automate regulatory compliance audits for SOC2, HIPAA, GDPR, and PCI-DSS.

Community
Intermediate