This post describes a comprehensive, HIPAA-ready generative AI architecture for healthcare on AWS using a defense-in-depth approach. By layering compliance controls at multiple distinct levels, the architecture creates a system where no single point of failure compromises patient data protection, and each component that touches ePHI is independently auditable.