AWS healthlake medium security documentation change
Summary
Added note that encryption configuration cannot be changed after data store creation, while other configurations can be updated.
Security assessment
Explicitly documents immutable encryption settings, which is a security control to prevent post-creation tampering with encryption. This enforces a security best practice for data protection.
Diff
diff --git a/healthlake/latest/devguide/managing-data-stores-create.md b/healthlake/latest/devguide/managing-data-stores-create.md index fe529c527..40ceeb3ff 100644 --- a//healthlake/latest/devguide/managing-data-stores-create.md +++ b//healthlake/latest/devguide/managing-data-stores-create.md @@ -16,0 +17,2 @@ When you create a HealthLake data store, a FHIR data repository is made availabl +After you create a data store, you can change its name, default FHIR validation profiles, NLP configuration, analytics configuration, and identity provider configuration. The encryption configuration can't be changed. For more information, see [Updating a data store](./managing-data-stores-update.html). +