reading comprehension - compliance needs

[shaharhada]

What the meaning of the expression "compliance needs" in the text:
https://docs.aws.amazon.com/kms/latest/developerguide/overview.html
in the sentence
AWS KMS is also integrated with AWS CloudTrail to log use of your CMKs for auditing, regulatory, and compliance needs.

 

[USAFRet]

Regulatory compliance.

For instance, medical.
Only certain users can access certain parts of the data.
To comply with government regulations.

Data is encrypted, and only those user accounts with the proper key can decrypt and access.

 

[shaharhada]

Regulatory compliance.

For instance, medical.
Only certain users can access certain parts of the data.
To comply with government regulations.

Data is encrypted, and only those user accounts with the proper key can decrypt and access.

Thanks a lot. You are fantastic guide.

 

[shaharhada]

Regulatory compliance.

For instance, medical.
Only certain users can access certain parts of the data.
To comply with government regulations.

Data is encrypted, and only those user accounts with the proper key can decrypt and access.

I think I confused. Can you elaborate the example of the medical needs (compliance medical needs).

 

[USAFRet]

I think I confused. Can you elaborate the example of the medical needs (compliance medical needs).

The people in the payroll office should never be able to access patient medical records.
Encrypted, and if the account for Joe in Payroll does not have the needed key, he cannot access. He has no 'need to know'.
That is a strict requirement, laid down in government regulations.
And the hospital must comply with those regulations.

Similarly, Nurse Pam should never be able to access the whole hospital payroll data.
She CAN, however, access her paycheck data. But she cannot access Nurse Williams paycheck data.

 

[shaharhada]

The people in the payroll office should never be able to access patient medical records.
Encrypted, and if the account for Joe in Payroll does not have the needed key, he cannot access. He has no 'need to know'.
That is a strict requirement, laid down in government regulations.
And the hospital must comply with those regulations.

Similarly, Nurse Pam should never be able to access the whole hospital payroll data.
She CAN, however, access her paycheck data. But she cannot access Nurse Williams paycheck data.

Thanks. very clear.

 

[shaharhada]

More question:
You can refine policies by using condition keys.
What the meaning in the text of to "refine policies" in organization? or the network? Is there a different?

 

[USAFRet]

More question:
You can refine policies by using condition keys.
What the meaning in the text of to "refine policies" in organization? or the network? Is there a different?

Policy is dictated by the organization.
Policies can change.

"Next week, we're standing up a second testing team. They need access to Part A, but not Part B.
Please change user access accordingly."

Or....
"New government regulations (Oct 1, 2021) dictate that blah blah needs to be changed. Handle it."