AWS HealthImaging
A HIPAA-compliant fully managed storage service for storing, searching, and retrieving DICOM medical images at scale
Overview
AWS HealthImaging is a dedicated storage service for storing and managing medical image data (DICOM format) such as CT, MRI, and X-ray at scale in the cloud. Built on a HIPAA-compliant security foundation, it maintains petabyte-scale image data at low cost while meeting the compliance requirements demanded by healthcare organizations. Its proprietary compression technology (HTJ2K) reduces storage costs by up to 40% compared to traditional DICOM storage while retrieving images with sub-second latency. The DICOM metadata search API enables rapid identification of image sets by conditions such as patient ID, exam date, and modality, also streamlining data supply to AI/ML pipelines.
Data Store Structure and DICOM Import
HealthImaging's data structure consists of three hierarchical levels: Data Store, Image Set, and Image Frame. A Data Store is a logical container that can be separated and managed by department or project. DICOM file import is performed via batch import jobs from S3 buckets, ingesting tens of thousands of DICOM instances through parallel processing. During import, DICOM metadata is automatically indexed, enabling fast searches via the SearchImageSets API by conditions such as Patient ID, Study Date, Modality, and Body Part. HTJ2K (High-Throughput JPEG 2000) codec lossless compression is automatically applied, reducing storage usage while fully preserving original image quality. For migration from existing PACS (Picture Archiving and Communication System), online transfer using the DICOMweb standard STOW-RS endpoint is also available.
High-Speed Image Retrieval and AI/ML Integration
HealthImaging's image retrieval API is optimized for frame-level random access. Partial retrieval operations such as fetching only specific slices from hundreds of CT scan slices or extracting only specific MRI sequences are performed at high speed. This eliminates the need to download all images for AI model training data preparation, enabling supply of only needed frames to SageMaker training jobs. The GetImageFrame API responds with sub-second latency, supporting real-time viewer applications as well. Related books on medical imaging (Amazon) cover DICOM standard fundamentals. A common practical architecture combines Lambda to automatically trigger inference pipelines on new image imports, attaching anomaly detection results as metadata in an event-driven architecture.
Security, Compliance, and Cost Design
Since medical image data contains personal health information (PHI), HealthImaging is designed as a HIPAA-eligible service. Encryption at rest (AES-256) and encryption in transit (TLS 1.2+) are enabled by default, with KMS customer-managed key encryption also available. IAM policies provide access control at the Data Store level, and CloudTrail records all API calls as audit logs. The cost structure consists of storage fees (GB/month) and API request fees. Compared to storing DICOM files directly in S3, considering the storage reduction from HTJ2K compression and the convenience of the search API, HealthImaging offers cost advantages for large-scale datasets. For data lifecycle management, automatic deletion policies can be configured for images exceeding the legally mandated retention period (5 years in Japan), enabling continuous storage cost optimization.