3 ms·
A big advantage to this is for applications that require HIPAA compliance. One of the rules for HIPAA is to encrypt data at rest. There may be better ways to en
by redguava 15y ago
A big advantage to this is for applications that require HIPAA compliance. One of the rules for HIPAA is to encrypt data at rest. There may be better ways to encrypt your information, but this will tick a box for compliance purposes (the advantage of this shouldn't be underestimated).
It basically allows HIPAA abiding applications to use S3 for data storage without the complexity of dealing with the encryption themselves, or using a 3rd party provider that offers this by proxy.
The only remaining step is to trial and error your way through using it due to the "light" documentation.
- kevin_morrill 15y agoI don't see how this can work at all if Amazon has access to your keys but doesn't sign a Business Associate Agreement under HIPAA. They've refused to do this for us. It might be viable to encrypt yourself and keep the keys, because then you're not giving them PHI---just goblety gook.