5 ms·
In AWS' HIPAA compliance docs they recommend not relying on their managed encryption services as they currently protect you from a legal standpoint but may not
by gravypod 8y ago
In AWS' HIPAA compliance docs they recommend not relying on their managed encryption services as they currently protect you from a legal standpoint but may not in the future (at least for RDS). Is AWS altering those guidelines and now going to say their encryption is good enough?
- joelhaasnoot 8y agoIsn't this true in general? This protects against someone walking into the datacenter and stealing a harddrive (which is Amazon's responsibility anyway). If you want to be sure the data is encrypted, store encrypted values/blobs/files/etc is generally Amazon's stance (for instance, for S3). For S3 they call this "client side encryption".