AWS Amazon HealthLake
Browse all AWS APIs★ Only Publicly Available OpenAPI DocumentHealthcareEhr Emrhmac13 EndpointsREST
For Agents
Provision and manage Amazon HealthLake FHIR datastores and orchestrate FHIR import and export jobs for bulk movement of healthcare data into AWS.
Use for: I need to create a new FHIR R4 datastore in HealthLake, Start a FHIR import job from an S3 bucket into a target datastore, Check the status of a recent FHIR export job, List all active FHIR datastores in this account
Not supported: Does not handle FHIR resource CRUD, clinical NLP, or appointment scheduling — use for HealthLake datastore provisioning and bulk import/export jobs only.
Jentic publishes the only available OpenAPI specification for Amazon HealthLake, keeping it validated and agent-ready. Amazon HealthLake is a HIPAA-eligible service that stores, transforms, queries, and analyses FHIR-formatted health data in the cloud. The control-plane API manages FHIR datastores and the import and export jobs that move bulk FHIR resources in and out of those datastores. With 13 operations it is a focused control surface for provisioning HealthLake infrastructure and running data movement jobs.
Install Jentic One Beta
Connect the Amazon HealthLake to your agent
Jentic One is a self-hosted execution layer for AI agents. It lets your agent call the Amazon HealthLake, or any other public or private API you need. You set the rules, the agent never sees your credentials, and every call is logged.
Two steps, two machines. Install the instance in a safe environment, then register your agent from wherever it runs.
1
Step 1: Jentic One Host machine
# On the machine that will host your Jentic One instance:
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh2
Step 2: Agent machine
# On the machine where your agent runs (keep this separate from the instance):
curl -fsSL https://raw.githubusercontent.com/jentic/jentic-one/main/tools/install.sh | sh
jentic register # connects your agent to your Jentic One instanceJentic One is in public beta. The setup above keeps your agent separate from the instance, which is what you want before using real credentials: an agent running as the same OS user as Jentic One can read its stored keys directly. Just evaluating? A single local install is fine to start. See the secure deployment guide for the tiers.
Capabilities
What an agent can do with Amazon HealthLake API.
Create FHIR datastores configured for HIPAA-eligible workloads with optional SMART on FHIR support
Describe and list FHIR datastores filtered by status
Start FHIR import jobs that load bulk NDJSON data from S3 into a datastore
Start FHIR export jobs that write a datastore's resources to S3 in NDJSON
Cancel running export jobs and inspect their status
Tag HealthLake datastores and manage resource tags for cost allocation
Delete FHIR datastores and free associated storage when retention requirements allow
Use Cases
Patterns agents use Amazon HealthLake API for, with concrete tasks.
★ FHIR Data Lake Provisioning
Stand up a HIPAA-eligible FHIR R4 datastore for clinical research or population-health analytics. CreateFHIRDatastore provisions storage and a FHIR endpoint, optionally attaching SMART on FHIR for OAuth-style access and a KMS key for encryption. Once provisioned, the datastore endpoint is a fully compliant FHIR REST API.
Call CreateFHIRDatastore with DatastoreTypeVersion=R4, DatastoreName=research-prod, and a SseConfiguration referencing a customer-managed KMS key
Bulk EHR Migration to HealthLake
Migrate millions of FHIR resources from a legacy EHR or staging bucket into HealthLake using StartFHIRImportJob. The import reads NDJSON files from S3, transforms them into the datastore, and writes results back to a configured output bucket. DescribeFHIRImportJob and ListFHIRImportJobs surface progress and failures during the migration.
Call StartFHIRImportJob with InputDataConfig pointing at s3://my-fhir-staging/patients/ and JobOutputDataConfig pointing at s3://my-fhir-output/
Periodic Export for Analytics
Export FHIR resources on a schedule for downstream analytics in a data warehouse or ML pipeline. StartFHIRExportJob writes NDJSON to S3, and DescribeFHIRExportJob reports completion. This decouples analytical workloads from the live FHIR endpoint while still providing point-in-time data extracts.
Call StartFHIRExportJob with the DatastoreId and OutputDataConfig pointing at s3://analytics-fhir/exports/2026-06/
AI Agent Healthcare Operations
Through Jentic, an AI agent can orchestrate HealthLake provisioning and data movement as part of a wider healthcare workflow — for example, creating a research datastore, starting an import, and emitting a notification once it completes. Jentic exposes the 13 control-plane operations as discoverable tools.
Search Jentic for 'start fhir import job', load the StartFHIRImportJob schema, and execute it for a specified datastore and S3 input path
Key Endpoints
13 endpoints — jentic publishes the only available openapi specification for amazon healthlake, keeping it validated and agent-ready.
METHOD
PATH
DESCRIPTION
POST
/
CreateFHIRDatastore — provision a new FHIR datastore
POST
/
DescribeFHIRDatastore — fetch datastore configuration and status
POST
/
ListFHIRDatastores — list datastores in the account
POST
/
StartFHIRImportJob — bulk-load FHIR data from S3
POST
/
StartFHIRExportJob — export FHIR data to S3
POST
/
DescribeFHIRImportJob — check status of an import job
POST
/
DescribeFHIRExportJob — check status of an export job
POST
/
DeleteFHIRDatastore — delete a datastore and its resources
POST
/
CreateFHIRDatastore — provision a new FHIR datastore
POST
/
DescribeFHIRDatastore — fetch datastore configuration and status
POST
/
ListFHIRDatastores — list datastores in the account
POST
/
StartFHIRImportJob — bulk-load FHIR data from S3
POST
/
StartFHIRExportJob — export FHIR data to S3
POST
/
DescribeFHIRImportJob — check status of an import job
POST
/
DescribeFHIRExportJob — check status of an export job
POST
/
DeleteFHIRDatastore — delete a datastore and its resources
Why Jentic?
Three things that make agents converge on Jentic-routed access.
Credential isolation
AWS access keys for HealthLake are stored encrypted in the Jentic vault. Given the sensitivity of healthcare workloads, this isolation is important — agents never see the raw keys.
Intent-based discovery
Agents search Jentic with intents like 'create fhir datastore' or 'start fhir import' and get back the matching HealthLake operation with its input schema.
Time to first call
Direct integration: 1-2 days to wire up the AWS SDK, IAM policies, and S3 import paths. Through Jentic: under an hour.
Related APIs
Alternatives and complements available in the Jentic catalogue.
FAQs
Specific to using Amazon HealthLake API through Jentic.
Why is there no official OpenAPI spec for Amazon HealthLake?
AWS does not publish an OpenAPI specification. Jentic generates and maintains this spec so that AI agents and developers can call Amazon HealthLake via structured tooling. It is validated against the live API and kept up to date. Get started at https://app.jentic.com/sign-up.
What authentication does the Amazon HealthLake API use?
The control-plane API uses AWS Signature Version 4 (HMAC) request signing with an AWS access key ID and secret access key. The FHIR data-plane endpoint on a datastore uses SigV4 by default and optionally SMART on FHIR OAuth tokens.
Can I import bulk FHIR data with the Amazon HealthLake API?
Yes. Call StartFHIRImportJob with an InputDataConfig that points to S3 NDJSON files and a JobOutputDataConfig for results. Use DescribeFHIRImportJob to monitor progress and inspect failed resources.
What are the rate limits for the Amazon HealthLake API?
AWS applies per-account, per-region request quotas to HealthLake control-plane operations and these vary by call. Datastore creation has lower quotas than describe and list operations. Check AWS Service Quotas for current limits.
How do I create a HealthLake datastore through Jentic?
Search Jentic for 'create healthlake fhir datastore', load the CreateFHIRDatastore schema, and execute with DatastoreTypeVersion=R4, a DatastoreName, and an optional KMS SseConfiguration. The response includes the DatastoreEndpoint URL once status reaches ACTIVE.
Is Amazon HealthLake HIPAA-eligible?
Yes. HealthLake is a HIPAA-eligible service and customers can use it for protected health information under a Business Associate Addendum with AWS. Encryption at rest with KMS and TLS in transit is enforced by default.
GET STARTED