October 19, 2022 – Amazon Web Services announced the availability of Landing Zone Accelerator (LZA) for Healthcare.
The LZA for Healthcare is an industry-specific deployment of the Landing Zone Accelerator on AWS solution architected to align with AWS best practices and in conformance with multiple, global compliance frameworks. When used in coordination with services such as AWS Control Tower, the Landing Zone Accelerator provides a comprehensive no-code solution across more than 35 AWS services and features to manage and govern a multi-account environment. The LZA is built to support customers with highly-regulated workloads and complex compliance requirements.
The AWS Compliance Program helps customers to understand the robust controls in place at AWS to maintain security and compliance in the cloud. Healthcare customers can benefit from the LZA for Healthcare as the security controls implemented are aligned with several prominent international frameworks, including:
- Health Insurance Portability and Accountability Act (HIPAA)
- Cloud Computing Compliance Controls Catalog (C5)
- National Cyber Security Centre (NCSC)
- Esquema Nacional de Seguridad (ENS) High
- International Organization for Standardization (ISO) 27001 and ISO 27002
The LZA for Healthcare can help reduce the effort and complexity in supporting your healthcare compliance efforts. In the rapidly evolving healthcare industry, organizations are increasingly realizing the benefits of cloud-based solutions, like those offered by AWS, to help them operate more efficiently and drive innovation. However, a key question that may arise is, “How do we run sensitive workloads in AWS?”
The answer to this question requires consideration of multiple factors, such as geographic location, regulatory requirements, or organization goals. Leveraging a multi-account strategy sets the stage for improved security posture and growth. This is referred to as an AWS landing zone. Individual AWS accounts enable resource independence and isolation through natural security, access, and billing boundaries for AWS resources.
For example, users outside of your account do not have access to your resources by default. By using a landing zone as a foundation, you can deploy your mission-critical application workloads and solutions across a centrally-governed multi-account environment. Further detail can be found in the Organizing your AWS Environment Using Multiple Accounts whitepaper.
The LZA for Healthcare builds upon this guidance to quickly deploy a solution foundation in AWS designed to be secure, resilient, scalable, and automated. This foundation can accelerate your readiness for a cloud compliance program, including:
- Default accounts
- Account structure
- Core networking infrastructure
- Security configurations for logging, monitoring, and notification
- Encryption