Compliance reference for AWS HealthLake
AWS HealthLake provides features designed to help you track and report API usage in alignment with CMS (Centers for Medicare & Medicaid Services) interoperability requirements. These features enable you to categorize API transactions by CMS-mandated categories and automatically capture usage metrics for compliance reporting purposes.
Understanding Your Compliance Responsibilities
Using AWS HealthLake and its CMS interoperability endpoints is not sufficient on its own to achieve CMS compliance. You are responsible for:
-
Correctly mapping your API workflows to the appropriate CMS category endpoints based on your specific use cases and regulatory obligations
-
Implementing proper authentication and authorization controls that meet CMS requirements
-
Ensuring your FHIR resources and data exchanges comply with applicable CMS regulations and implementation guides
-
Configuring and monitoring the CloudWatch metrics to support your compliance reporting needs
-
Understanding which CMS rules apply to your organization and implementing the appropriate technical and operational controls
AWS HealthLake provides the infrastructure and tooling to support your compliance efforts, but you must use these features appropriately based on your specific regulatory requirements. Simply routing API calls through these endpoints does not automatically make your application compliant with CMS regulations.
Topics
