Searching FHIR Resources with POST on AWS HealthLake

Key Players

Details

This article serves as a technical guide on how to search FHIR resources within AWS HealthLake. It emphasizes that when dealing with highly sensitive data, such as Personally Identifiable Information (PII) or Protected Health Information (PHI), using the POST method is recommended based on security best practices. Using POST ensures that this sensitive data is added to the request body and encrypted in transit, thereby increasing security. The search procedure involves first identifying the HealthLake region and datastore ID, and then determining the target FHIR resource type (e.g., Observation, Patient, Condition). A POST method must be used with a specified URL, including concrete search parameters within the JSON request body (e.g., `value-concept=266919005` or `birthdate=eq1997`). This process is executed using authorization schemes like AWS Signature Version 4 (SigV4) or SMART on FHIR. Specific search examples are provided, such as checking smoking history (Observation resource), searching for patients born in a specific year (Patient resource), or finding conditions with a particular medical code (Condition resource). This explains how developers can execute safe and structured queries against actual data stores. This is crucial technical information directly relevant to standard interoperability implementations in Japanese electronic health records and regional healthcare collaboration systems.

Technology Note

FHIR（Fast Healthcare Interoperability Resources）は医療データ交換の国際標準。このエントリの関連技術: FHIR