Skip to main content

A HIPAA-grade healthcare platform on AWS, taught through eight working use cases

Each item is meant to become a working deployment, a repo that takes an empty account to a running system, and a chapter here that explains the AWS services through the use case. Every statement on this site carries a claim id that links to the primary AWS source it rests on.

Catalog decided 4 September 2026. Primary region us-east-1. Evidence re-fetched from AWS the same day.

The eight items

One use case pulls in many services. A verdict says how much is new work: build where nothing public exists, fork where a permissively licensed AWS sample is the right base, link where AWS already demonstrates it and rebuilding would teach the wrong thing.

ItemUse caseThe storyVerdict
F0a / F0bHIPAA-ready landing zoneA bare "AWS (advanced)" account becomes audit-ready in one deploy; the organisation layer is linked, not rebuilt.Build / Link
U1Patient portal + native mobile appsThe reference application: sign in with a passkey, see results, message the care team — on web, iPhone and Android.Build
U2Remote patient monitoringVitals stream through the patient’s phone into trends, alerts, and models trained on the fleet’s own history.Build
U3Ambient clinical documentationA recorded visit becomes a clinician-approved note with timestamp citations in the FHIR record.Fork + build
U4Intelligent document intakeFaxes and referrals are extracted, reviewed by a person, and assembled into a prior-auth packet.Link + fork
U5Population health analyticsA governed, de-identified lake you can ask questions of; risk models flow back into the apps.Fork + build
U6Patient engagement contact centreAmazon Connect Health demonstrated as a product rather than rebuilt.Link
P0The education portalThis site — generated from each use-case repo so it never drifts from what is deployed.Build

Three tiers per use case

Every item climbs the same ladder, so a reader who learns one already knows the shape of the next.

Tier 1

Core

The working system on the shared spine: CDK, FastAPI on Fargate Express Mode, Aurora Serverless v2, DynamoDB, Cognito, CloudFront, HealthLake.

Tier 2

Embedded AI

An assistant inside the workflow — Bedrock plus AgentCore Gateway, with PHI protected at the tool boundary by interceptors and Cedar policy, not a model-call guardrail alone.

Tier 3

Learned models

Models trained on the platform’s own data through one SageMaker Pipelines spine, scoring back into the apps and traceable to a registered version.

Rules that hold everywhere

  • Nothing retired in a new designApp Runner, Bedrock Agents classic, Kendra, Q Business, Pinpoint, Amplify Gen 1, the classic Mobile SDKs and the rest of the 2026-06 maintenance wave are out. The eligibility list is not a lifecycle signal.
  • PHI at the agent tool boundaryA Guardrail on the model call sees prompt and completion text only. Tool inputs and results are protected by AgentCore Gateway interceptors, Cedar policy and a logs data-protection policy.
  • Zero-retention models for PHIPHI prompts go to a model whose retention mode can be none; Claude Fable 5.x requires aws_review and is used only on de-identified inputs.
  • Eligible by name or by feature — say whichS3 Tables, Timestream for InfluxDB, Valkey and Bedrock KB / Guardrails / Data Automation rest on the GA-features clause; chapters say so and design so it does not matter.
  • us-east-1, "AWS (advanced)", BAA firstHealthScribe pins the primary region; the empty-account runbook starts from an advanced account with the BAA accepted before any PHI step.
  • Reuse before rebuild, and label itFork MIT-0 / Apache-2.0 / MIT only; CC-BY-SA is link-only; community repos are labelled; forked chapters carry AWS’s own usage disclaimer.

How to read this site

C74 a claim re-fetched from its primary AWS source on 2026-09-04C18 a synthesis or fit judgement, marked Mediumlead decision the evidence gave a trade-off; we chose and wrote it down