AWS healthlake documentation change

Service: healthlake · 2026-01-25 · Documentation low

File: healthlake/latest/devguide/importing-fhir-data-start.md

Summary

Added SAP ABAP SDK code example for StartFHIRImportJob API, including KMS encryption and IAM role usage with access control error handling.

Security assessment

While the code sample shows security best practices (KMS encryption, IAM roles), this documents existing features rather than addressing vulnerabilities. The AccessDenied exception handling is standard and doesn't indicate a security fix.

Diff

diff --git a/healthlake/latest/devguide/importing-fhir-data-start.md b/healthlake/latest/devguide/importing-fhir-data-start.md
index 38c3c7a69..de61061de 100644
--- a//healthlake/latest/devguide/importing-fhir-data-start.md
+++ b//healthlake/latest/devguide/importing-fhir-data-start.md
@@ -118,0 +119,52 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+SAP ABAP
+    
+
+**SDK for SAP ABAP**
+    
+
+###### Note
+
+There's more on GitHub. Find the complete example and learn how to set up and run in the [AWS Code Examples Repository](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/sap-abap/services/hll#code-examples). 
+    
+    
+        TRY.
+            " iv_job_name = 'MyImportJob'
+            " iv_input_s3_uri = 's3://my-bucket/import/data.ndjson'
+            " iv_job_output_s3_uri = 's3://my-bucket/import/output/'
+            " iv_kms_key_id = 'arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012'
+            " iv_data_access_role_arn = 'arn:aws:iam::123456789012:role/HealthLakeImportRole'
+            oo_result = lo_hll->startfhirimportjob(
+              iv_jobname = iv_job_name
+              io_inputdataconfig = NEW /aws1/cl_hllinputdataconfig( iv_s3uri = iv_input_s3_uri )
+              io_joboutputdataconfig = NEW /aws1/cl_hlloutputdataconfig(
+                io_s3configuration = NEW /aws1/cl_hlls3configuration(
+                  iv_s3uri = iv_job_output_s3_uri
+                  iv_kmskeyid = iv_kms_key_id
+                )
+              )
+              iv_dataaccessrolearn = iv_data_access_role_arn
+              iv_datastoreid = iv_datastore_id
+            ).
+            DATA(lv_job_id) = oo_result->get_jobid( ).
+            MESSAGE |Import job started with ID { lv_job_id }.| TYPE 'I'.
+          CATCH /aws1/cx_hllvalidationex INTO DATA(lo_validation_ex).
+            DATA(lv_error) = |Validation error: { lo_validation_ex->av_err_code }-{ lo_validation_ex->av_err_msg }|.
+            MESSAGE lv_error TYPE 'I'.
+            RAISE EXCEPTION lo_validation_ex.
+          CATCH /aws1/cx_hllthrottlingex INTO DATA(lo_throttling_ex).
+            lv_error = |Throttling error: { lo_throttling_ex->av_err_code }-{ lo_throttling_ex->av_err_msg }|.
+            MESSAGE lv_error TYPE 'I'.
+            RAISE EXCEPTION lo_throttling_ex.
+          CATCH /aws1/cx_hllaccessdeniedex INTO DATA(lo_access_ex).
+            lv_error = |Access denied: { lo_access_ex->av_err_code }-{ lo_access_ex->av_err_msg }|.
+            MESSAGE lv_error TYPE 'I'.
+            RAISE EXCEPTION lo_access_ex.
+        ENDTRY.
+    
+    
+
+  * For API details, see [StartFHIRImportJob](https://docs.aws.amazon.com/sdk-for-sap-abap/v1/api/latest/index.html) in _AWS SDK for SAP ABAP API reference_. 
+
+
+
+