Great suggestions, thanks! I'm sure a whole book could be written about HIPAA compliance and AWS, but a lot of general AWS security best practices will end up b

Great suggestions, thanks! I'm sure a whole book could be written about HIPAA compliance and AWS, but a lot of general AWS security best practices will end up being useful towards a goal of HIPAA compliance. I'll definitely be covering encryption at rest, VPC, and multi-region deployments. CloudFormation DSL also seems like it could be a separate book (or even a series of books, like you see with Puppet/Chef), but I'll try to include what I can when it is relevant to architectural decisions.