Skip to main content

Angle 1 — `existing-reference-repos`

Generated at build time from research/aws-demo-catalog/sources/existing-reference-repos.md in the repo — edit the source, not this page.

Date: 2026-09-04. Scout output for research/aws-demo-catalog/brief.md, angle 1. Every catalog reference is to catalog-v0.md by item and tier.

Summary

AWS-official public code now covers the AI layers of the catalog far better than the core workflows. The strongest finds are: the GenAI IDP Accelerator (U4 Tier 1+2, one-click, pushed today), the 2026 "Amazon Connect Health" sample family (U3 Tier 1+2 with HealthLake write-back; U6 patient verification), sample-healthcare-agents (U4 Tier 2 prior-auth / eligibility / coding agents on AgentCore + Strands, CDK, pushed 2026-09-03), sample-healthscribe-bedrock-clinical-analysis (U3 Tier 1+2 on CDK), the LZA-for-Healthcare configuration (F0, but organisation-only), and the multimodal health data Guidance (U5 Tier 1+3, notebook-driven). Nothing AWS-official demonstrates U1 Tier 1 (patient portal + native mobile app), U2 Tier 1 (device → IoT Core → Flink → InfluxDB/Iceberg remote patient monitoring), phone-paired HealthKit/Health Connect/BLE ingestion on a current Amplify generation, AgentCore Gateway MCP tools over telemetry (U2 Tier 2), Greengrass v2 edge scoring without SageMaker Edge Manager (U2 Tier 3), or any of the Tier 3 healthcare-specific models newer than 2022. Several otherwise-relevant repos depend on retired services (Pinpoint, Bedrock Agents classic, A2I/Ground Truth, SageMaker Edge Manager, IoT Analytics) and are flagged below. Workshop Studio pages are JavaScript-only and could not be read by the fetch tool; workshop titles are recorded from the search index with that caveat. Licenses are MIT-0 unless noted; the one non-permissive find is aws-security-reference-architecture-examples (CC-BY-SA-4.0).

Repo metadata (pushed_at, license, archived, stars) was retrieved from the GitHub REST API on 2026-09-04 unless stated otherwise. "Pushed" is the GitHub pushed_at field, i.e. last commit push to any branch.


Table A — artefacts found, by catalog item and tier

Coverage scale: full = deploys the catalog tier's workflow end to end; partial = several components wired together but missing major pieces; component = one service or pattern only. Deploy story: empty→running = documented IaC path from a fresh account to a working system; semi = IaC plus manual console steps or an external prerequisite (e.g. an existing Connect instance, an org); snippet = notebooks/CLI only.

F0 — HIPAA-ready landing zone

ArtefactMaintainerPushed / versionIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-samples/landing-zone-accelerator-on-aws-for-healthcareaws-samplespushed 2026-06-18; latest release v1.9.0-e dated 2025-11-29 (README)LZA YAML config (global/security/organization/network) executed by the LZA engine (CloudFormation + CodePipeline + CDK)MIT-0F0full for org-level F0: Config rules from the "Operational Best Practices for HIPAA Security" conformance pack, SCP scp-hlc-hipaa-service.json restricting to HIPAA-eligible services, Security Hub, GuardDuty, CloudTrail, KMS, centralised VPC endpoints, Transit Gatewaysemi: requires AWS Control Tower with Management/Audit/LogArchive accounts and an OU tree (Infrastructure, HIS, EIS); README states it is "not designed for single-account deployments"; ~US$400–500/month idle (README)Answers brief open question 2: this F0 example assumes an organisation. Macie, WAF/Shield, IAM Identity Center, tagging not confirmed in README summary — check config files before claiming. AWS Industries blog "Introducing Landing Zone Accelerator for Healthcare" (undated in results) is the announcement.
awslabs/landing-zone-accelerator-on-awsawslabs (AWS Solutions)pushed 2026-09-03; 825 starsCDK (TS) engine; CloudFormation launchApache-2.0F0component (the engine the healthcare config runs on)semi (org required)Deployable AWS Solution; docs at docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/.
aws-solutions/aws-control-tower-customizations (CfCT)aws-solutionspushed 2026-07-01; 416 starsCloudFormation + CodePipelineApache-2.0F0componentsemi (org required)Confirms Control Tower is still the actively maintained landing-zone path as of 2026-07 (angle 2 owns the formal status question).
aws-samples/aws-security-reference-architecture-examplesaws-samplespushed 2026-09-04; 1,152 starsCloudFormation (via CfCT) and TerraformCC-BY-SA-4.0 (LICENSE file, fetched 2026-09-04; GitHub reports NOASSERTION)F0partial (Security Hub, GuardDuty, Macie, Config, CloudTrail org patterns)semi (org required)Non-permissive: flag for open question 5. Do not fork; can be linked.
aws-samples/deploy-conformance-pack-for-aws-startup-security-baselineaws-samplespushed 2025-03-28CDKMIT-0F0component (single-account conformance-pack deploy pattern; not the HIPAA pack)empty→running (single account)Only single-account F0-style pattern found; swap in the HIPAA pack template.
awslabs/aws-config-rules — Operational-Best-Practices-for-HIPAA-Security.yaml; docs page Operational Best Practices for HIPAA Securityawslabs / AWS docsretrieved 2026-09-04CloudFormation conformance pack(repo)F0componentn/aThe pack name catalog-v0 asks to VERIFY still exists under this name (angle 2 confirms formally).
aws-samples/sample-hipaa-assistantaws-samplespushed 2026-07-08Go CLI + MCP server; reviews CloudFormation/Terraform; optional BedrockMIT-0F0 (portal chapter aid)componentn/a (tool, not infra)Flags HIPAA Security Rule gaps with eCFR citations; explicitly "does not guarantee compliance". Useful as an F0 chapter demo of evidence generation.
aws-samples/sample-hipaa-serverless-medical-reimbursementaws-samplespushed 2026-07-16SAMMIT-0F0 / U4 Tier 1component (per-domain KMS envelope encryption, TLS-only queues, audit)empty→runningIllustrative, "not a certified HIPAA solution" (README).
Guidance for Workload Isolation on AWS (page)AWS Solutions Libraryretrieved 2026-09-04F0componentSurfaced by search only; not read in depth.
HIPAA Quick Start (2017, "quickstart-compliance-hipaa")formerly aws-quickstartWhat's New 2017-08CloudFormationF0Not found in any AWS org; only a personal fork survives. Treat as retired; do not link.

U1 — Patient portal + companion mobile app

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-samples/aws-healthlake-smart-on-fhiraws-samples2024-03-16CDK (TS); HealthLake + Lambda token verifier + Secrets Manager; external OAuth2 (ORY)MIT-0U1 Tier 1component (SMART-on-FHIR HealthLake datastore; no UI, no Cognito)empty→runningClosest official pattern for "patient reads their own FHIR record".
aws-samples/sample-intelligent-security-for-healthcare-apisaws-samples2026-08-14CloudFormation + deploy script; API Gateway, Lambda FHIR processor, Cognito MFA, DynamoDB RBAC, EventBridge, Bedrock anomaly/sensitivity classification, Comprehend Medical PHI redaction, Bedrock GuardrailMIT-0U1 Tier 1 (API/auth layer) + cross-cutting compliancepartialempty→running (10–15 min per README); HealthLake optionalGood fork target for the U1 API boundary and the "compliance evidence" chapter.
aws-samples/serverless-patient-engagement-stackaws-samples2025-04-01CDK (TS); API Gateway HTTP, Lambda, DynamoDB streams, EventBridge scheduler, Amazon Pinpoint, Amazon ConnectMIT-0U1 Tier 1 (reminders) / U6partial (backend only, no UI)semi (Cloud9 + Connect auto-config)Uses Pinpoint (catalog rule 4, VERIFY item) — cannot be linked as-is.
aws-samples/aws-patient-digital-front-dooraws-samples2024-04-25Python; Bedrock Knowledge Bases + OpenSearch Serverless; no IaC in READMEMIT-0U1 Tier 2componentsnippetMember-experience RAG, not a deployable portal.
aws-samples/extract-medical-insights-from-amazon-healthlake-with-bedrockaws-samples2024-11-05Python chat app; Bedrock text-to-SQL/FHIR over HealthLakeApache-2.0U1 Tier 2 / U5 Tier 2partial (clinician/analyst-facing, not patient-facing)semiPermissive but not MIT-0; fine to fork.
aws-samples/sample-bedrock-agentcore-healthcare-s3vectorsaws-samples2026-07-16AgentCore + S3 Vectors multi-agent clinical decision supportMIT-0U1 Tier 2 (assistant pattern)partial (not patient-facing; no FHIR tools)not verifiedREADME notes HIPAA/de-identification emphasis (search summary).
aws-samples/sample-healthcare-agent-with-agentcore-on-awsaws-samples2026-08-03AgentCore CLI deploy (no CDK); AgentCore Runtime + Bedrock Llama 3.1 70B + SageMaker Bio-ELECTRA endpoint + OpenSearch; smolagentsMIT-0U1 Tier 2 + Tier 3 (a SageMaker endpoint called by the agent)partial (medication Q&A; no UI/portal)semiDemonstrates "agent calls a custom SageMaker model" — the Tier 2→3 bridge.
aws-samples/aws-amplify-cdk-iot-ble-swift-appaws-samples2026-08-04 (but README references CDK v1.105, CocoaPods → pre-Gen-2 Amplify, CDK v1)CDK v1 + Amplify iOS (Gen 1-era) + Cognito + IoT Core MQTT + S3MIT-0U1 Tier 1 mobile / U2 Tier 1 device pairingcomponentsemiThe only AWS-official "phone reads BLE sensor → IoT Core" sample; stack is stale. AWS Mobile blog "Bluetooth Low Energy (BLE) IoT mobile application with AWS Amplify, AWS IoT and Swift" is the companion post.
aws-samples/aws-iot-proxy-mobile-app-androidaws-samples2020-08-13, archivedAndroid BLE→MQTT proxyMIT-0U2 Tier 1 device pairing (Android)componentArchived; structural reference only.
aws-samples org search amplify gen2retrieved 2026-09-04U1 Tier 1 mobileZero repositories in aws-samples match "amplify gen2" in name/description. GitHub topic amplify-gen2 (retrieved 2026-09-04) lists 14 community repos, none AWS-owned; one is React Native/Expo (mattenarle10/expo-amplify). Angle 3 owns the Amplify library question; the finding here is only that no AWS-official Gen 2 healthcare or mobile sample exists.
vintasoftware/aws-healthlake-cognito-api-gateway-infracommunity (Vinta)not fetchedHealthLake + Cognito + API Gatewaynot verifiedU1 Tier 1componentnot verifiedLead only; label as community if used.
Workshops (Workshop Studio; titles from search index, pages not fetchable): Amazon HealthLake Workshop with code in aws-samples/healthlake-workshop (MIT-0, pushed 2026-01-29, archived); SMART on FHIR with AWS HealthLake; AWS HealthLake Patient Matching with AWS Entity ResolutionAWSindex retrieved 2026-09-04U1 Tier 1 (FHIR store), U5 Tier 1componentevent/own account (unverified)HealthLake workshop teaches create datastore → import Synthea → export → QuickSight dashboard (aws.amazon.com/healthlake/getting-started, retrieved 2026-09-04).

U2 — Remote patient monitoring from connected devices at scale

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-solutions-library-samples/guidance-for-aws-iot-greengrass-foundationsAWS Solutions Library2026-07-23CDK v2 (TS); Greengrass Core, Thing Groups, policies, S3; CodeCatalyst blueprint optionMIT-0U2 Tier 1 (gateway)componentempty→runningGuidance page: aws.amazon.com/solutions/guidance/aws-iot-greengrass-foundations/.
aws-samples/aws-greengrass-ec2-device-farmaws-samples2026-08-30CDK v2; simulated heterogeneous Greengrass fleet on EC2Apache-2.0U2 Tier 1 (simulated fleet for demos)componentempty→runningUseful to demo "fleet" without hardware.
aws-samples/aws-iot-greengrass-v2-using-aws-cdkaws-samples2024-08-15, archivedCDK; Greengrass v2 real-time ingestionMIT-0U2 Tier 1partialArchived.
aws-samples/aws-iot-fleet-provisioningaws-samplesnot fetchedPython reference clientnot verifiedU2 Tier 1 (fleet provisioning)componentsnippetIssue #13 discusses Greengrass v2 support.
aws-samples/ingesting-iot-data-into-amazon-s3-using-amazon-kinesis-data-firehoseaws-samples2023-05-10, archivedCloudFormation; IoT rule → Firehose → S3MIT-0U2 Tier 1 (cold path)componentPre-Iceberg.
aws-samples/transactional-datalake-using-amazon-datafirehose-icebergaws-samplesnot fetchedCDK; Firehose → S3 Iceberg (CDC source, not IoT)not verifiedU2 Tier 1 / U5 Tier 1 (Iceberg landing)componentnot verifiedLead; the Firehose→Iceberg pattern with CDK. AWS Big Data Blog 2025-07 "Optimize industrial IoT analytics with Amazon Data Firehose and Amazon S3 Tables with Apache Iceberg" is the IoT-specific writeup (surfaced via aggregator; original not fetched).
Timestream for InfluxDB + IoT Core samplesearched 2026-09-04U2 Tier 1 (hot path)none foundOnly awslabs/amazon-timestream-tools (tools) and the AWS Database Blog "Features and workflows with Amazon Timestream for InfluxDB 3" (undated in results). No aws-samples repo wires IoT Core → InfluxDB with CDK.
aws-solutions-library-samples/guidance-for-enhancing-smart-products-through-device-telemetry-and-amazon-connectAWS Solutions Library2026-07-23IoT Core telemetry → Amazon ConnectMIT-0U2 Tier 1 alerts → U6componentnot verifiedAdjacent: "device telemetry triggers a contact-center action".
aws-samples/flink-keyed-random-cut-forest-exampleaws-samples2025-12-19Java; Managed Service for Apache Flink + Kinesis Data Streams; per-key (per-patient) RCF model kept in Flink state; built-in data generator; no IaC (console steps)MIT-0U2 Tier 3 (per-patient anomaly detection)partialsemiExactly the "per-patient RCF" pattern in catalog U2 Tier 3, minus SageMaker and IaC. AWS Big Data Blog "Real-time anomaly detection via Random Cut Forest in Amazon Managed Service for Apache Flink" is the companion.
aws-samples/flink-industrial-anomaly-detector; aws-samples/amazon-sagemaker-anomaly-detection-with-rcf-and-deeparaws-samplesnot fetchedFlink RCF; SageMaker RCF/DeepAR notebooksnot verifiedU2 Tier 3componentsnippetLeads.
aws-samples/amazon-sagemaker-feature-store-streaming-inference-msk-kdaaws-samples2024-01-04Flink (then "KDA") streaming aggregation → Feature Store → SageMaker XGBoost endpointMIT-0U2 Tier 3 ("real-time endpoint called by Flink")partialsemiPattern match for Flink→SageMaker; fraud domain, pre-rename naming. AWS Architecture Blog "Real-time in-stream inference with Kinesis, SageMaker, Flink" references kda-flink-ml async-I/O sample.
aws-samples/amazon-sagemaker-deepar-mlops-pipeline-cdkaws-samples2025-04-10CDK; DeepAR MLOps with serverless orchestrationMIT-0U2 Tier 3 (deterioration forecasting)componentempty→runningGeneric time-series; not health data.
aws-solutions-library-samples/guidance-for-deploying-ai-agents-to-device-fleets-using-aws-iot-greengrassAWS Solutions Library2025-10-27Greengrass v2 + Strands Agents + local small language modelsMIT-0U2 Tier 3 (edge inference on Greengrass v2)component (LLM at edge, not a quantised scoring model)not verifiedThe only current Greengrass-v2 ML/agent Guidance found.
aws-samples/greengrass-v2-sagemaker-edge-manager-pythonaws-samplesnot fetchedGreengrass v2 + SageMaker Edge Managernot verifiedU2 Tier 3 (edge scoring)partialEdge Manager discontinued 2024-04-26 (docs: SageMaker Edge Manager end of life, retrieved 2026-09-04; AWS recommends Greengrass v2 + ONNX). Cannot be linked as-is.
aws-samples/amazon-sagemaker-aws-greengrass-custom-timeseries-forecastingaws-samples2021-03-03, archivedGreengrass (v1-era) + IoT Analytics + SageMakerMIT-0U2 Tier 3partialUses IoT Analytics and Greengrass v1 (retired list). Structural reference only.
cleverdevil/healthlakecommunity2022-06-08, archived, no licenseApple HealthKit export → S3 data lakenoneU2 Tier 1 (HealthKit ingest)componentOnly HealthKit→AWS repo located; unlicensed and archived. The "Apple Watch HealthKit → MQTT/X.509 → IoT Core → SQS → Lambda → DynamoDB → Flutter dashboard" repo that search summaries described could not be found on the remote-patient-monitoring topic page (fetched 2026-09-04) or by direct search — treat as unverified.
awslabs/aws-sdk-ios-samples IoT-Sample/Swift; AWS IoT Device SDKs page (lists AWS IoT Device SDK for Swift, MQTT 5)awslabs / AWS docsretrieved 2026-09-04Swift MQTT + Cognito identityApache-2.0 (SDK samples)U2 Tier 1 device pairingcomponentsnippetAngle 3 owns the recommendation; recorded here as the available sample code.
AgentCore Gateway MCP tools over telemetrysearched 2026-09-04U2 Tier 2none foundNearest generic: aws-samples/sample-strands-agent-with-agentcore (reference architecture), aws-samples/sample-aws-ops-agentcore-gateway-search (Gateway with 268+ AWS operations as tools), aws-solutions-library-samples/guidance-for-multi-agent-orchestration-using-bedrock-agentcore-on-aws. None expose time-series/telemetry queries as typed tools.

U3 — Ambient clinical documentation

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-samples/sample-amazon-connect-health-unified-clinical-workflowaws-samples2026-08-31CloudFormation (3–4 sequential stacks); Amazon Connect + Amazon Connect Health (ambient documentation, SOAP, medical coding), HealthLake FHIR R4 write-back, "Amazon Bedrock Agents" for care-manager NL queries, Bedrock Guardrails, ECS Fargate Flask, Kinesis Video Streams, CloudFront/S3 UIs embedded in Connect Agent WorkspaceMIT-0U3 Tier 1 + Tier 2 (+ U6 adjacency)near-full (capture → note → coding → HealthLake DocumentReference; human review in workspace)semi: requires a registered Amazon Connect instance and Connect Health domain; medical coding is "gated preview"The README names "Amazon Bedrock Agents" for the care-manager workspace — verify whether that is Bedrock Agents classic (retired list) before linking; the Connect Health features themselves are current. Amazon Connect Health GA 2026-03-05, us-east-1/us-west-2, "HIPAA-eligible" per What's New.
aws-samples/sample-amazon-connect-health-point-of-careaws-samples2026-03-31CloudFormation; Connect Health ambient documentation + patient insights; HealthLake longitudinal record; Bedrock pre-visit narrative; SNS SMS; ECS Fargate (Flask REST + Java WebSocket); 3 CloudFront distributions; optional CognitoMIT-0U3 Tier 1 + Tier 2; U1 Tier 2 (patient insights)partial→full for note generationsemi (needs Connect Health access, HealthLake datastore with data)Earlier sibling of the unified-workflow sample.
aws-samples/sample-healthscribe-bedrock-clinical-analysisaws-samples2026-04-07CDK; AWS HealthScribe real-time streaming + Bedrock "12 specialist agents"; Lambda, ECS Fargate, Step Functions, DynamoDB, S3/CloudFront, Cognito, ACM; React + Vite + CloudscapeMIT-0U3 Tier 1 + Tier 2partial→full (no HealthLake write-back documented; no Comprehend Medical coding step named)empty→running (deploy.sh + frontend script; needs an ACM certificate)Best stack-spine match for U3 (CDK, Fargate, React/Vite, Cognito, CloudFront).
aws-samples/aws-healthscribe-demoaws-samples2025-04-08; 60 starsAmplify Gen 1 (package.json fetched 2026-09-04: aws-amplify ^6.14, no @aws-amplify/backend), React 19 + Cloudscape, Cognito, S3; HealthScribe → Comprehend Medical ontology linking (ICD-10-CM / SNOMED CT / RxNorm)MIT-0U3 Tier 1 (+ the Comprehend Medical linking step)partialsemi: docs/deploy.md uses Amplify console + CodeCommit (CodeCommit stopped onboarding new customers in 2024; verify before relying on it)Most-starred HealthScribe sample; UI patterns worth borrowing, deploy path stale.
aws-samples/medical-transcription-analysisaws-samples2023-07-18; 94 starsCDK; Transcribe Medical streaming WebSocket + Comprehend Medical; ReactMIT-0U3 Tier 1 (pre-HealthScribe path)partialempty→running (yarn deploy)Older; the "Transcribe Medical where HealthScribe is unavailable" fallback.
aws-samples/enhancing-patient-and-clinician-experiences-with-healthscribeaws-samples2026-01-13not fetchedMIT-0U3 Tier 2not verifiedLead.
aws-samples/sup-hcls-generate-clinical-notes-with-aiaws-samples2024-07-23HealthScribe / Bedrock / TranscribeMIT-0U3 Tier 1–2not verifiedSearch index says it includes a Transcribe+Bedrock alternative for regions without HealthScribe.
aws-samples/amazon-comprehend-medical-fhir-integrationaws-samples2024-01-22, archived; 54 starsComprehend Medical entities → FHIR resourcesMIT-0U3 Tier 1 (FHIR mapping)componentArchived.
Tier 3 evaluation: aws-samples/healthcare-LLM-as-a-Judge (date truncated in API result), aws-samples/eval-genai-techniques-clinicalreport (2024-04-15)aws-samplesas notednotebooksMIT-0U3 Tier 3 (evaluation harness)componentsnippetNo fine-tuned note-quality/coding classifier on SageMaker found.

U4 — Intelligent document intake

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-solutions-library-samples/accelerated-intelligent-document-processing-on-aws ("GenAI IDP Accelerator")AWS Solutions Library2026-09-04; 302 stars; CHANGELOG top v0.6.6CloudFormation/SAM one-click (us-east-1, us-west-2, eu-central-1) with CDK and Terraform alternates; Pattern 1 = Bedrock Data Automation end-to-end, Pattern 2 = Textract OCR → Bedrock classify/extract/assess; built-in human review (custom, not A2I); evaluation framework with MLflow; web UI behind Cognito + WAF; MCP via AgentCore Gateway (Quick Suite integration); IDP CLI agent chatMIT-0U4 Tier 1 + Tier 2full (generic): intake → extract/classify → confidence-gated review → summarise; no Comprehend Medical / HealthLake / Macieempty→runningAnswers the Textract-vs-BDA sub-question from the repo side: both are first-class in Sept 2026 (BDA is the default pattern; Textract remains for OCR-first). No retired service found in README/CHANGELOG.
aws-samples/aws-ai-intelligent-document-processingaws-samples2026-05-04; 244 starsLinked from Guidance for Intelligent Document Processing on AWS (retrieved 2026-09-04), whose architecture is AgentCore Runtime + Strands multi-agent (Orchestrator / Automation / Trainer / Troubleshooter) + AgentCore Identity/Gateway/Observability + Textract + ECS dashboardMIT-0U4 Tier 2partial→full (generic)not verified from repoThe Guidance's Well-Architected "Security" text explicitly points to Comprehend Medical PHI redaction for clinical text.
aws-samples/sample-healthcare-agentsaws-samples2026-09-03CDK (TS); Amplify-hosted React + Cognito; AgentCore Runtime (Lambda) + Gateway tools; Strands SDK; HealthLake FHIR R4; Comprehend Medical; AWS B2B Data Interchange (EDI 837P); CDS HooksMIT-0U4 Tier 2 (prior-auth packet assembly, eligibility, medical coding, claims assembly/submission, appeals)full for Tier 2; Tier 1 intake not included (starts from clinical data, not PDFs)empty→running (config.yaml with HealthLake datastore ID, cdk deploy --all)Closest match to catalog U4 Tier 2 wording. Note there is also an archived sibling sample-strands-agents-for-healthcare-and-life-sciences (2026-01-23).
aws-samples/sample-smart-prescription-readeraws-samples2026-03-31CDK (TS) Nx monorepo; Textract + Bedrock (Claude/Nova) extract → evaluate → correct; Step Functions; Lambda; DynamoDB; AppSync; Cognito; KMS; React + CloudscapeMIT-0U4 Tier 1 + Tier 2 (single document type)partialempty→running (pnpm install, nx deploy)Healthcare-specific, stack-spine-adjacent (AppSync rather than REST).
aws-samples/sample-scalable-intelligent-document-processing-with-amazon-bedrock-data-automationaws-samples2026-07-28CDK (Python); BDA + Step Functions + SQS + Lambda; human review via SageMaker Ground Truth / A2IMIT-0U4 Tier 1partialsemi (manual workforce + A2I workflow setup)Uses A2I and Ground Truth (retired list). Cannot be linked as-is; the accelerator above supersedes it.
aws-solutions-library-samples/guidance-for-multimodal-data-processing-using-amazon-bedrock-data-automationAWS Solutions Library2026-03-25; 66 starsBDA over documents/images/audio/videoMIT-0U4 Tier 1componentnot verifiedGeneric BDA Guidance.
aws-samples/aws-ai-phi-deidentificationaws-samples2025-04-23CDK single-command; React UI; Textract OCR → Comprehend Medical PHI detection → bulk redactionMIT-0U4 Tier 1 (PHI step) / U5 Tier 1 (de-identification pipeline)partialempty→runningThe only deployable de-identification pipeline found.
aws-samples/amazon-textract-idp-cdk-constructsaws-samples2024-04-29CDK constructs (TS)MIT-0U4 Tier 1componentStale (16 months).
Guidance for Ingesting PDF and Image Files to AWS HealthLake (page, diagram PDF)AWS Solutions Libraryretrieved 2026-09-04; undatedCloudFormation; Lambda + S3 + HealthLake (Textract mentioned)U4 Tier 1 → HealthLakepartialno sample-code link on pageArchitecture only.
Blogs: Build an agentic AI healthcare claims pipeline with Amazon Bedrock and AWS HealthLake (ML blog, 2026-06-29: CMS-1500 → BDA → Strands agent on AgentCore → FHIR Claim in HealthLake); Prior authorization for medical claims using Strands Agents (Industries blog, undated in results)AWS blogsas notedU4 Tier 1+2design referencesCode for the claims-pipeline post was not located as a standalone repo (search pointed to the HCLS agents toolkit).
Workshop: "Intelligent Healthcare Systems: FHIR, AI, and AWS HealthLake" (Workshop Studio)AWSindex retrieved 2026-09-04; page not fetchableU4 Tier 1 → U5per index: CMS-1500 claims and SOAP notes → queryable FHIRunverifiedAngle 4 should confirm module list.

U5 — Population health analytics and risk models

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
aws-solutions-library-samples/guidance-for-multi-modal-data-analysis-with-aws-health-and-ml-services; Guidance page now at docs.aws.amazon.com/solutions/multi-modal-data-analysis-with-aws-health-and-ml-services/AWS Solutions Library2024-12-17CloudFormation one-click (SageMaker domain) + sequential notebooks; HealthOmics + HealthLake + HealthImaging → Lake Formation → Athena → QuickSight; SageMaker Feature Store; AutoGluon-Tabular; real-time endpoint; Synthea coherent datasetMIT-0U5 Tier 1 + Tier 3partial→full (governed lake + dashboards + risk models) but notebook-driven, QuickSight-era naming (Quick now), no S3 Tables/Iceberg, no de-identification stepsemiGuidance page has 10-step architecture and Well-Architected pillars (retrieved 2026-09-04, undated). Closest existing thing to the U5 chapter.
aws-solutions-library-samples/guidance-for-patient-entity-resolution-with-aws-healthlake (Guidance page)AWS Solutions Library2025-09-11HealthLake + AWS Entity ResolutionMIT-0U5 Tier 1 (master patient index)componentnot verifiedCompanion workshop exists (see U1 row).
aws-samples/aws-ai-phi-deidentificationaws-samples2025-04-23see U4MIT-0U5 Tier 1 (de-id)partialempty→running
aws-samples/sample-s3-annotations-healthcare-data-lineageaws-samples2026-07-08not fetchedMIT-0U5 Tier 1 (lineage/governance)not verifiedLead.
aws-samples/extract-medical-insights-from-amazon-healthlake-with-bedrockaws-samples2024-11-05see U1Apache-2.0U5 Tier 2 (NL analytics over HealthLake)partialsemiText-to-SQL; predates Quick.
aws-samples/aws-ml-readmission-predictionaws-samples2022-04-18SageMaker notebooks, HPO, real-time inference pipeline; README claims HIPAA-eligible servicesMIT-0U5 Tier 3 (readmission risk)partialsnippet4+ years old.
aws-samples/amazon-sagemaker-data-wrangler-hospital-readmission-predictionaws-samples2021-10-25Data Wrangler workshop, UCI diabetic datasetMIT-0U5 Tier 3componentsnippetStale.
aws-samples/amazon-healthlake-patient-outcome-predictionaws-samples2022-09-06, archivedHealthLake + SageMaker, SyntheaMIT-0U5 Tier 3partialArchived.
aws-samples/ai-ml-sagemaker-multi-model-pipelineaws-samples2022-10-23SageMaker Pipelines on diabetic patient dataMIT-0U5 Tier 3componentsnippetStale.
aws-samples/sample-Adverse-Drug-Reaction-Prediction-Using-AWS-HealthLake-and-AWS-Clean-Rooms-Part1 / Part2; sample-PredictPatientsAdverseDrugReactionsUsingAWSCleanRoomsMLandCloudFormation (2026-05-25)aws-samples2026-07-09HealthLake + Clean Rooms ML; CloudFormation variantMIT-0 (one sibling has no license)U5 Tier 3 (cross-org risk model)not verifiedNewest healthcare ML samples; Clean Rooms angle is outside the catalog spine.
Generic MLOps spine: aws-samples/amazon-sagemaker-pipeline-deploy-manage-100x-models-python-cdk (2026-07-28, MIT-0, CDK; Pipelines + Model Registry + quality checks); aws-samples/regulated-mlops-using-amazon-sagemaker; aws-samples/mlops-e2eaws-samplesas notedCDKMIT-0U1/U2/U3/U4/U5 Tier 3 (Pipelines, Registry)componentempty→runningReusable Tier 3 scaffolding; no healthcare data. Clarify-successor question is angle 2's.
aws-samples/aws-healthcare-lifescience-ai-ml-sample-notebooksaws-samples2025-12-16; 116 starsnotebooksMIT-0U5 Tier 3componentsnippetNotebook library; not a deployment.
AWS ML Blog "Population health applications with Amazon HealthLake – Part 1: Analytics and monitoring using Amazon QuickSight"AWS2021 (LinkedIn share dated 2021)Glue + Athena + QuickSightU5 Tier 1design referenceDated; QuickSight is now Quick (dossier).

U6 — Patient engagement contact center with AI agents (light pass per brief default 7)

ArtefactMaintainerPushedIaC / stackLicenseTier(s)CoverageDeploy storyNotes
Amazon Connect Health (product page; What's New 2026-03-05)AWS (product)GA 2026-03-05Managed: patient verification (GA), ambient documentation (GA), appointment management / patient insights / medical coding (preview); us-east-1, us-west-2; "HIPAA-eligible"U6 Tier 1 + Tier 2; U3product, not repoChanges the U6 build decision: identity verification and scheduling are now first-party features rather than Lex+Lambda code.
aws-samples/sample-healthcare-realtime-eligibilityaws-samples2026-03-03Lambda integrating Real-Time Eligibility into Connect HealthMIT-0U6 Tier 1componentnot verified
aws-samples/sample-Nova-Sonic-AgentCore-Healthcare-Call-Centeraws-samples2026-05-21CDK (Python); AgentCore Runtime + Nova 2 Sonic speech-to-speech; Cognito; DynamoDB; SNS escalation; WebSocket audio; no Amazon ConnectMIT (not MIT-0; permissive)U6 Tier 2 (outbound appointment agent)partialempty→running (deployment guide in docs/)Modern agent stack; not a contact-center integration.
aws-samples/sample-amazon-connect-bedrock-agent-voice-integrationaws-samples2025-11-18CDK (TS); Connect → Lex → Bedrock Agents classic (action groups) → Lambda → DynamoDB; Nova MicroMIT-0U6 Tier 1+2 (booking assistant)partialempty→running (issues a phone number)Uses Bedrock Agents classic (retired list). Cannot be linked as-is; structure (Connect+Lex+CDK) is reusable.
aws-samples/voice-enabled-patient-diaryaws-samples2024-08-27Lex + Connect outbound calls; patient-reported outcomesMIT-0U6 Tier 1partialnot verifiedLex version not verified (Lex V1 is retired).
aws-samples/amazon-connect-with-amazon-lex-genai-capabilities; aws-samples/omnichannel-experience-bot-with-bedrock-and-lexaws-samplesnot fetchedConnect + Lex + Bedrocknot verifiedU6 Tier 2componentLeads (generic).
aws-solutions-library-samples/guidance-for-connecting-automated-inputs-to-contact-centers-on-awsAWS Solutions Library2025-11-18IoT / IVR inputs → contact centerMIT-0U6 ↔ U2componentAdjacent.
Workshops: Getting started with Amazon Connect; Amazon Connect forecasting, capacity planning, and scheduling; amazon-connect/amazon-connect-workshopsAWS / amazon-connect orgindex retrieved 2026-09-04U6 Tier 1; Tier 3 (demand forecasting is a Connect product feature, not SageMaker)link-out candidatesNo healthcare-specific Connect workshop found.

P0 — Education portal

ArtefactMaintainerDateWhat it isRelevance
Workshop Studio (catalog.workshops.aws); discovery moved to builder.aws.com/build/workshops per What's New 2025-11-18; workshops.aws/categories/* now 301-redirects there (observed 2026-09-04)AWS2025-11-18AWS's own learn-by-deploying platformBoth the old category pages and the new Builder Center listing are JavaScript-rendered and returned no content to the fetch tool; angle 4 owns structure. Healthcare workshop titles located via search index: Amazon HealthLake Workshop; SMART on FHIR with AWS HealthLake; Intelligent Healthcare Systems: FHIR, AI, and AWS HealthLake; AWS HealthLake Patient Matching with AWS Entity Resolution; an "introduction workshop on generating clinical notes using AWS HealthScribe, Amazon Bedrock and Amazon Transcribe" (title only, URL not located).
aws-samples.github.io/amazon-bedrock-agents-healthcare-lifesciences (repo aws-samples/amazon-bedrock-agents-healthcare-lifesciences, pushed 2026-09-03, 268 stars, MIT-0; 36+ agents on AgentCore + Strands despite the "bedrock-agents" name; CloudFormation shared infra; life-sciences focus, no provider-side agents)aws-samples2026-09-03A GitHub-Pages docs site generated from the repo ("Developer Guide", agent catalog, skills/MCP servers usable from Claude Code / Kiro / Quick)The clearest AWS example of portal content generated from the repo itself — the P0 "content from README/ADR" pattern. Linked from the Health AI Hub as "Life Sciences Toolkit".
AWS Health AI HubAWS (EMEA)retrieved 2026-09-04, undatedApplications / Lab / Knowledge; nine partner use cases plus the LS toolkitComparator for P0; mostly partner products, not deployable repos.
healthcare.awsaccelerators.com/healthcare-demos.htmlAWS (NHS-oriented)retrieved 2026-09-04, undatedEleven generative-AI healthcare demos (symptom checker, MedSpeak, care plans, PHQ-9/GAD-7 screening, etc.)Comparator: a demo portal, but no GitHub/deploy links on the page.
Any public "education portal" repo for this purposesearched 2026-09-04None found; P0 is build-new by definition.

Table B — catalog items and tiers with NO good public example (new-work value)

Item / tierWhat was searchedClosest thing foundVerdict
F0, single-account "empty account → HIPAA baseline"aws-samples/awslabs/aws-solutions + Solutions Library for HIPAA/landing zone/conformance packLZA-for-Healthcare (organisation-only, US$400–500/mo idle); startup-baseline conformance-pack CDK sample (not HIPAA pack)No example. New work: single-account CDK stack (KMS, CloudTrail, Config HIPAA pack, Security Hub, GuardDuty, Macie, VPC endpoints, WAF) with LZA as the optional org extension (brief open question 2 default).
U1 Tier 1 patient portal + iOS/Android appaws-samples "patient portal/engagement", Amplify Gen 2 samples, HealthLake+CognitoSMART-on-FHIR HealthLake (no UI); healthcare-APIs security sample (API layer); zero aws-samples Amplify Gen 2 reposNo example. Highest demonstration value in the catalog.
U1 Tier 2 patient-facing assistant over the patient's own FHIR data via AgentCore Gateway toolsAgentCore + HealthLake + MCPClinician-facing chat (text-to-SQL, 2024); AgentCore medication agent (no FHIR); Industries blog on an open-source HealthLake MCP server (lead, not fetched)No example.
U1 Tier 3 no-show / adherence modelSageMaker + appointmentnothingNo example.
U2 Tier 1 RPM end-to-end (X.509 devices → IoT Core → Kinesis → Flink → Timestream for InfluxDB + Firehose → Iceberg/Athena → alerts → app)aws-samples, Solutions Library IoT Guidance, MarketplaceComponents only (Greengrass foundations Guidance, EC2 device farm, archived Firehose→S3, Firehose→Iceberg CDC sample); Marketplace partner offerings (not code)No example. Second-highest demonstration value.
U2 phone-paired devices HealthKit / Health Connect / BLE → IoT Coreaws-samples, communityCDK-v1/Amplify-Gen-1 BLE Swift sample; archived Android proxy; archived unlicensed HealthKit→S3No current example.
U2 Tier 2 telemetry as typed MCP tools on AgentCore GatewayAgentCore Gateway samplesGeneric Gateway samples (AWS ops, protein tools)No example.
U2 Tier 3 Greengrass v2 edge scoring with a SageMaker-trained model, post-Edge-ManagerGreengrass ML samplesEdge-Manager sample (service discontinued 2024-04-26); IoT-Analytics sample (archived); Strands SLM-at-edge Guidance (LLM, not scoring)No current example.
U3 Tier 3 note-quality / coding-suggestion classifierSageMaker + clinical notesLLM-as-a-judge notebooksNo example (evaluation harness partially covered).
U4 Tier 3 document-type classifier / denial-risk model on SageMakerIDP + SageMakerAccelerator classifies with Bedrock, not SageMakerNo example.
U5 Tier 1 governed lake on S3 Tables/Iceberg + Quick + de-identificationHealthLake export, Iceberg, QuickMultimodal Guidance (Lake Formation + Athena + QuickSight, notebooks, 2024-12) + separate de-id samplePartial only; integration is new work.
U5 Tier 3 readmission / chronic-risk model on current SageMaker (Pipelines, Registry, Feature Store)aws-samples healthcare MLAll healthcare readmission samples are 2021–2022; generic MLOps CDK is currentStale only.
U6 Tier 1 Connect + Lex V2 + Cognito identity without retired componentsConnect samplesVoice sample uses Bedrock Agents classic; Connect Health now provides patient verification as a productPartial; likely resolved by linking to Connect Health rather than building.
P0Repo-generated docs site (HCLS agents toolkit) as a patternBuild new (expected).

Retired-service dependencies found (catalog rule 4)

RepoRetired dependencyConsequence
aws-samples/serverless-patient-engagement-stackAmazon PinpointCannot link as-is (Pinpoint is the catalog's VERIFY item; angle 3 confirms lifecycle). Fork for CDK/EventBridge structure only.
aws-samples/sample-amazon-connect-bedrock-agent-voice-integrationBedrock Agents classic (action groups)Cannot link as-is.
aws-samples/sample-scalable-intelligent-document-processing-with-amazon-bedrock-data-automationSageMaker A2I + Ground TruthCannot link as-is; GenAI IDP Accelerator supersedes.
aws-samples/greengrass-v2-sagemaker-edge-manager-python; aws-greengrass/aws-greengrass-component-examples (sagemaker-edge-manager folder)SageMaker Edge Manager (EOL 2024-04-26)Cannot link as-is.
aws-samples/amazon-sagemaker-aws-greengrass-custom-timeseries-forecastingIoT Analytics, Greengrass v1Archived; cannot link.
aws-samples/sample-amazon-connect-health-unified-clinical-workflowREADME says "Amazon Bedrock Agents" for the care-manager workspaceVerify classic vs AgentCore before linking; rest of the repo is current.
aws-samples/aws-healthscribe-demoAmplify Gen 1 + CodeCommit deploy pathNot on the retired list, but the deploy path is stale; verify CodeCommit availability (new-customer onboarding stopped 2024).
aws-samples/amazon-bedrock-agents-healthcare-lifesciencesName suggests classic Agents, but README (fetched 2026-09-04) states AgentCore + StrandsSafe; name is historical.

Gaps — searched for and not found

  • Any AWS-official Amplify Gen 2 sample (web or native mobile) in aws-samples with a healthcare framing; aws-samples org search returned 0 repos for "amplify gen2".
  • An AWS-official HealthKit / Health Connect → AWS ingestion sample; only an archived community HealthKit→S3 project.
  • The community "Apple Watch → IoT Core → Flutter dashboard" repo repeatedly described by search summaries; not present on the remote-patient-monitoring topic page and not found by direct query. Treated as unverified.
  • An IoT Core → Timestream for InfluxDB sample with IaC.
  • An AgentCore Gateway sample exposing time-series or telemetry tools.
  • A sample-code link for "Guidance for Ingesting PDF and Image Files to AWS HealthLake".
  • A HealthScribe workshop URL on Workshop Studio (title only, via search index).
  • Workshop module content: all catalog.workshops.aws, workshops.aws/categories/* and builder.aws.com/build/workshops pages are JS-rendered and returned no content; workshop rows above carry titles/URLs from the search index only. Angle 4 should verify from a browser.
  • The LZA healthcare docs page on docs.aws.amazon.com returned only a title; facts were taken from the aws-samples README instead.
  • Any healthcare readmission/no-show/denial-risk SageMaker sample newer than 2022.

Notes for the comparator

  • Fork candidates with stack-spine fit (CDK TS / Fargate / React / Cognito / CloudFront): sample-healthscribe-bedrock-clinical-analysis (U3), sample-healthcare-agents (U4 Tier 2), sample-smart-prescription-reader (U4, AppSync variant), sample-intelligent-security-for-healthcare-apis (U1 API layer, CloudFormation), guidance-for-aws-iot-greengrass-foundations (U2 gateway).
  • Link-out candidates: GenAI IDP Accelerator (U4 Tier 1+2 generic; one-click), LZA for Healthcare (F0 org extension), multimodal health Guidance (U5), Amazon Connect Health product + samples (U6 Tier 1; U3 alternative path), HealthLake workshops (U1/U5 FHIR basics).
  • Build-new with real demonstration value: F0 single-account, U1 Tier 1+2 (portal + mobile + patient-scoped agent), U2 Tier 1–3 (the whole RPM pipeline), all Tier 3 healthcare models, P0.
  • Provenance labels (brief open question 1): everything in Table A is AWS-official except vintasoftware/... and cleverdevil/healthlake, both marked community.
  • License flags (open question 5): aws-security-reference-architecture-examples is CC-BY-SA-4.0 (non-permissive); sample-Nova-Sonic-AgentCore-Healthcare-Call-Center is MIT (attribution required, permissive); several are Apache-2.0 (permissive); cleverdevil/healthlake has no license.

Source list (retrieval or publication dates)

GitHub REST API (api.github.com/repos/..., api.github.com/search/repositories?q=org:...), all retrieved 2026-09-04, for every repo metadata row above.

READMEs fetched 2026-09-04: landing-zone-accelerator-on-aws-for-healthcare; sample-amazon-connect-health-unified-clinical-workflow; sample-amazon-connect-health-point-of-care; serverless-patient-engagement-stack; aws-patient-digital-front-door; sample-healthcare-agent-with-agentcore-on-aws; sample-hipaa-assistant; sample-Nova-Sonic-AgentCore-Healthcare-Call-Center; aws-amplify-cdk-iot-ble-swift-app; sample-healthcare-agents; aws-healthlake-smart-on-fhir; aws-healthscribe-demo (docs/deploy.md and package.json); accelerated-intelligent-document-processing-on-aws (README, CHANGELOG); flink-keyed-random-cut-forest-example; guidance-for-multi-modal-data-analysis-with-aws-health-and-ml-services; sample-smart-prescription-reader; amazon-bedrock-agents-healthcare-lifesciences; sample-intelligent-security-for-healthcare-apis; sample-hipaa-serverless-medical-reimbursement; sample-scalable-intelligent-document-processing-with-amazon-bedrock-data-automation; medical-transcription-analysis; sample-healthscribe-bedrock-clinical-analysis; guidance-for-aws-iot-greengrass-foundations; sample-amazon-connect-bedrock-agent-voice-integration; aws-security-reference-architecture-examples (LICENSE).

AWS pages: Amazon Connect Health What's New (2026-03-05); Amazon Connect Health product page (2026-09-04); Workshops in Builder Center What's New (2025-11-18); Guidance for IDP on AWS (2026-09-04); Guidance for Multi-Modal Data Analysis (2026-09-04); Guidance for Ingesting PDF and Image Files to AWS HealthLake (2026-09-04); SageMaker Edge Manager end of life (2026-09-04); Operational Best Practices for HIPAA Security (2026-09-04); AWS IoT Device SDKs (2026-09-04); Health AI Hub (2026-09-04); healthcare.awsaccelerators.com demos (2026-09-04); HealthLake getting started (2026-09-04); Introducing Landing Zone Accelerator for Healthcare (blog; date not captured); Build an agentic AI healthcare claims pipeline (2026-06-29); Prior authorization using Strands Agents (date not captured); Quick Start HIPAA What's New (2017-08).

GitHub topic pages fetched 2026-09-04: remote-patient-monitoring, amplify-gen2.

Workshop Studio URLs (titles from search index, 2026-09-04; content not fetchable): HealthLake Workshop 498fdbc5-…; SMART on FHIR 542c1a0f-…; Intelligent Healthcare Systems da0cf4f5-…; Patient Matching 23c3858d-…; Getting started with Amazon Connect d1f03aa4-…; catalog.workshops.aws/amazon-connect-optimization.