PDF guideHIPAA enforcement
Fined for not looking
Three 2025 HIPAA enforcement actions, the one requirement cited in all three, and the AWS WAF controls that answer each attack. Includes a blank risk-analysis worksheet.
PDF guideHIPAA on AWS
HIPAA on AWS: the technical implementation guide
How the HIPAA Security Rule maps to specific AWS configurations, written by the team that builds these environments for a living.