See: https://aws.amazon.com/compliance/hipaa-compliance/
https://aws.amazon.com/compliance/pci-dss-level-1-faqs/