AWS publishes HIPAA Assistant for cited security-rule reviews of code and infrastructure
AWS has published an open-source HIPAA Assistant that reviews infrastructure-as-code and application code for security-rule gaps while citing each finding to exact regulatory text. The tool can scan CloudFormation and Terraform offline, use Amazon Bedrock for application-code analysis, or expose the same cited checklist through an MCP server. AWS stresses that the proposed rule remains subject to change.