S3 Tables HIPAA Eligibility

Amazon S3 is indeed HIPAA eligible, provided that you sign the AWS Business Associate Agreement (BAA) and configure the service to meet HIPAA requirements. However, S3 Tables is not explicitly mentioned in the AWS HIPAA Eligible Services list. This means you may need to verify its eligibility and ensure compliance by following the shared responsibility model.

For services like S3 Transfer Acceleration or Glacier, HIPAA eligibility often requires additional configuration or validation. Similarly, you may need to expand the compliance scope for S3 Tables if it interacts with Protected Health Information (PHI).

Hi, Bharath.

According to the HIPAA Eligible Services page, all features of HIPAA Eligible services are also eligible to create, receive, process, maintain, or transmit ePHI unless specifically noted otherwise. Amazon Simple Storage Service (Amazon S3) is listed as a HIPAA Eligible service, and there are no notes otherwise of any features here: https://aws.amazon.com/compliance/hipaa-eligible-services-reference/.

Thank you.