Afaik, the major clouds use encryption transparently. Google Cloud has some good docs on this. There are private compute type VMs and customer supplied key options as well.
My advice would be to use the cloud provided solutions and not roll your own setup. They have sufficient protections and offerings for healthcare companies and GovCloud if you need to go that far.