I want to activate or manage an AWS Business Associate Addendum (BAA) agreement for AWS Organizations with an AWS account for an organization.
Short description
BAA agreements are required for some organizations that are subject to the Health Insurance Portability and Accountability Act (HIPAA). HIPAA compliance safeguards protected health information (PHI). You can use AWS Artifact to manage agreements for your AWS account or you can use AWS Organizations for accounts in your organization. For more information, see Managing agreements in AWS Artifact.
Resolution
Required permissions
Important: Before you accept an agreement, consult with your legal, privacy, and compliance team.
By default, only users with administrative privileges can accept agreements. To allow AWS Identity and Access Management (IAM) or federated users to manage agreements, grant the required AWS Artifact permissions.
Manage an agreement for a single account
Complete the following steps:
- Open the AWS Artifact console.
- In the navigation pane, choose Agreements.
- Choose the Account agreements tab.
- Select the agreement, and then choose Download agreement.
- In the Accept NDA to download report window, review the AWS Artifact Nondisclosure Agreement (NDA).
- Select I have read and agree to all the terms of the NDA, and then choose Accept NDA and download.
- Review the downloaded agreement PDF in your PDF viewer.
- Return to the AWS Artifact console, select the agreement, and choose Accept agreement.
- In the Accept agreement window, review the agreement, then select I agree to all of these terms and conditions, and then choose Accept agreement.
For more information, see Accepting agreements for your AWS account in AWS Artifact.
Manage an agreement for multiple accounts in an organization
Prerequisites:
- You must be signed in to the management account of your AWS organization.
- AWS Organizations must be turned on for each feature. If you configured your organization for consolidated billing only, then activate features.
- Member accounts with organizations:DescribeOrganization permissions can view organization agreements accepted on their behalf.
Complete the following steps:
- Open the AWS Artifact console.
- In the navigation pane, choose Agreements.
- Choose the Organization agreements tab.
- Select the agreement and choose Download agreement.
- In the Accept NDA to download report window, review the AWS Artifact NDA.
- Select I have read and agree to all the terms of the NDA, then choose Accept NDA and download.
- Review the downloaded agreement PDF in your PDF viewer.
- Return to the AWS Artifact console, select the agreement, and then choose Accept agreement.
- In the Accept agreement window, review the agreement, select I agree to all of these terms and conditions, and then choose Accept agreement.
For more information, see Accepting agreements for your organization in AWS Artifact.
Related information
Managing agreements in AWS Artifact
Introducing the Self-Service Business Associate Addendum
HIPAA eligible services reference
AWS Artifact FAQs