AWS HealthLake's FHIR OAuth 2.0 Scopes and SMART Functionality Explained
HealthLake でサポートされている FHIR OAuth 2.0 スコープでの SMART - AWS Documentation
AWS HealthLake supports SMART on FHIR OAuth 2.0 scopes for data store creation.
Summary
AWS HealthLake adopts OAuth 2.0 as its authorization protocol, utilizing the SMART on FHIR framework to enforce granular access control. This allows client applications to access only the specific data scopes (patient, user, or system) required for their function.
Key Players
Details
HealthLake implements fine-grained access control over FHIR resources using OAuth 2.0 and the SMART on FHIR framework. Authorization is not just about authentication; it defines precisely which scope—and thus what operations (read/write)—are permitted. The system supports three levels of access: patient, user, and system. Developers can define scopes by combining these levels with specific resource types and CRUD operations. A key advancement in FHIR V2.2 is the support for search-parameter based filtering via query strings. This allows access to be restricted not only by resource type but also by specific data characteristics. This architecture is crucial for adhering to the Principle of Least Privilege, ensuring that client applications can only interact with the minimum necessary set of patient or user data required for their intended function, thereby enhancing data privacy and security in healthcare IT systems.
Technology Note
FHIR（Fast Healthcare Interoperability Resources）は医療データ交換の国際標準。このエントリの関連技術: SMART ON FHIR
Original content copyright by respective publishers