AWS Security ChangesHomeSearch

AWS healthlake medium security documentation change

Service: healthlake · 2026-06-13 · Security-related medium

File: healthlake/latest/devguide/managing-data-stores-create.md

Summary

Added note that encryption configuration cannot be changed after data store creation, while other configurations can be updated.

Security assessment

Explicitly documents immutable encryption settings, which is a security control to prevent post-creation tampering with encryption. This enforces a security best practice for data protection.

Diff

diff --git a/healthlake/latest/devguide/managing-data-stores-create.md b/healthlake/latest/devguide/managing-data-stores-create.md
index fe529c527..40ceeb3ff 100644
--- a//healthlake/latest/devguide/managing-data-stores-create.md
+++ b//healthlake/latest/devguide/managing-data-stores-create.md
@@ -16,0 +17,2 @@ When you create a HealthLake data store, a FHIR data repository is made availabl
+After you create a data store, you can change its name, default FHIR validation profiles, NLP configuration, analytics configuration, and identity provider configuration. The encryption configuration can't be changed. For more information, see [Updating a data store](./managing-data-stores-update.html).
+