HIPAA PHI in S3 Needs Object Lock in Compliance Mode, Not Just Versioning

·6 views

A discussion on r/aws raised whether S3 buckets holding Protected Health Information need Object Lock beyond versioning and lifecycle policies. The author argues that HIPAA section 164.316(b)(2) requires six-year retention of PHI-related documentation, which versioning alone cannot guarantee because versions and delete markers can be removed. Object Lock in Governance mode can still be overridden by privileged users, so Compliance mode is presented as the only tamper-proof option. The article describes three Stave controls that grade gaps in severity, from Object Lock being absent to using Governance mode or a retention period shorter than 2190 days.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Microsoft Links Windows 11 Memory Work to Rising RAM Costs

Windows 11 24H2 Home and Pro editions stopped receiving security updates on October 13, 2026, while Enterprise and Education editions remain supported until October 2027. Microsoft's Windows and Devices president, Pavan Davuluri, has tied ongoing memory optimization for systems with 8GB or more to the rising cost of memory rather than performance alone. Industry reports cite steep DRAM contract price increases and sold-out memory capacity, as chipmakers prioritize AI data center demand. Microsoft has listed memory optimization among its key focus areas for the rest of the year, signaling a push to reduce Windows' memory footprint. The October update also moves supported branches to new builds and pushes users toward Windows 11 26H2.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

KhataSnap Digitizes Handwritten Shop Ledgers with On-Device AI for Indian Merchants

A developer has built KhataSnap, an open-source app that turns photographed handwritten credit ledgers used by small shopkeepers into digital records. The tool runs an open-weight vision model locally on the device to protect customer privacy, a key concern for merchants wary of uploading neighborhood debt data to cloud servers. It includes a verification step where the shopkeeper confirms ambiguous digits, reducing the risk of AI transcription errors. The app also calculates balances deterministically and sends respectful Hinglish WhatsApp payment reminders. The project targets the widespread informal credit system in India and South Asia, where weekly reconciliation can take hours and large sums remain uncollected.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Debugging TypeScript in Firefox DevTools Using Source Maps and WebExtension Types

Firefox runs compiled JavaScript, so source maps are needed to display original TypeScript files in the debugger. Enabling the sourceMap option in tsconfig.json generates .map files that link compiled lines back to their source positions. Developers can then set breakpoints in .ts files directly within DevTools's Debugger tab. Because types are erased at compile time, runtime checks such as typeof guards are needed to surface type-related errors in the console. The guide also recommends the firefox-webext-browser type package for catching extension API errors before publishing to AMO.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Working code is not enough: developers urge focus on understanding and judging software

A DEV Community author argues that code that merely runs is not the same as good engineering. They point to questions about handling unexpected inputs, maintainability, root-cause fixes, scalability, and explaining design decisions. The piece suggests learning moves from frameworks and debugging to reasoning about systems, open source, and real projects. It also notes that AI speeds up coding, so the key skill becomes evaluating and testing generated code rather than just producing it. The author closes by inviting readers to share hard-won engineering lessons.

0 comments Read more at DEV Community