Amazon ElastiCache for Redis | Compliance

Question 1

Are there additional costs for using encryption?

Compliance

Amazon ElastiCache for Redis | Database

Answer 1

There are no additional costs for using encryption.

Question 2

Is Amazon ElastiCache for Redis HIPAA eligible?

Compliance

Amazon ElastiCache for Redis | Database

Answer 2

Yes, Amazon ElastiCache for Redis is a HIPAA Eligible Service and has been added to the AWS Business Associate Addendum (BAA). This means you can use ElastiCache for Redis to help you process, maintain, and store protected health information (PHI) and power healthcare applications.

Question 3

What do I have to do to use HIPAA eligible ElastiCache for Redis?

Compliance

Amazon ElastiCache for Redis | Database

Answer 3

If you have an executed Business Associate Agreement (BAA) with AWS, you can use ElastiCache for Redis to build HIPAA-compliant applications. If you do not have a BAA or have other questions about using AWS for your HIPAA-compliant applications, contact us for more information. See Architecting for HIPAA Security and Compliance on Amazon Web Services for information about how to configure Amazon HIPAA Eligible Services to store, process, and transmit PHI.

Question 4

Which compliance programs does ElastiCache for Redis support?

Compliance

Amazon ElastiCache for Redis | Database

Answer 4

ElastiCache for Redis supports compliance programs such as SOC 1, SOC 2, SOC 3, ISO, MTCS, C5 and HIPAA. See AWS Services in Scope by Compliance Program for current list of supported complaince programs.