In this post, we describe a comprehensive, HIPAA-ready generative AI architecture for healthcare on Amazon Web Services (AWS) using a defense-in-depth approach. By layering compliance controls at multiple distinct levels, this architecture creates a system where no single point of failure compromises patient data protection, and each component that touches ePHI is independently auditable.