Amazon Quick is HIPAA‑eligible for AI workloads in healthcare
Amazon Quick, AWS’s agentic AI workspace, has been designated as a HIPAA‑eligible service, meaning it can be used to process, store, and transmit protected health information (PHI) when customers sign a Business Associate Addendum (BAA) through AWS Artifact. Eligibility does not equal compliance; organizations must still configure encryption, access controls, audit logging, and their own…
Key points
- Amazon Quick is HIPAA‑eligible, but customers must sign a BAA and configure controls for full compliance.
- Data at rest is encrypted by default; customer‑managed KMS keys are optional and need an Enterprise subscription.
- Audit logging uses CloudTrail and CloudWatch vended logs (CHAT\LOGS, FEEDBACK\LOGS, etc.) that must be enabled and masked for PHI.
The service encrypts data at rest by default with AWS‑owned or managed keys, while customer‑managed KMS keys are optional and require an Enterprise subscription. Data flows into Quick via two paths: unstructured content through ACL‑aware knowledge bases (e.g., S3 buckets) and structured data through Quick Sight datasets backed by Athena, with row‑ and column‑level security. Governance features include role‑based access control, single sign‑on, ACL‑aware retrieval, and detailed audit signals via CloudTrail and CloudWatch vended logs (CHAT\LOGS, FEEDBACK\LOGS, etc.). The blog outlines a step‑by‑step deployment guide, from signing the BAA and registering encryption keys to creating spaces, custom agents, and connectors, and finally enabling audit logs and validation before scaling to PHI‑adjacent workflows.
Deploy AI in a HIPAA-eligible environment with Amazon Quick
AWS Machine Learning Blog · 22 October 2026
Loading the full article…
This text was published by AWS Machine Learning Blog and written by Meena Menon. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Agents & Tools
All →- AAIF adds four new agent projects from Anthropic, OpenAI, Alibaba · 3 src
- OpenAI patches monitoring gaps after red team finds agent oversight holes · 2 src
- Amazon Polly adds 14 generative voices and Hindi, Finnish support · 1 src
- Microsoft says Diagnostic Orchestrator diagnoses four times more accurately than doctors · 1 src
- Google CEO says Gemini agents will be integrated into Search through an agentic layer · 3 src
Comments
via GitHub Discussions