Engineering and Technology
| Open Access | A Scalable AWS-Native Architecture for Modernizing Legacy Healthcare Information Systems Through Secure Microservices and Automated DevOps Pipelines
Dr. Rizky Pratama Wijaya , Department of Cloud Computing and Distributed Systems Nusantara Institute of Technology, Jakarta, IndonesiaAbstract
Legacy healthcare information systems often operate through fragmented data models, monolithic applications, limited interoperability, and manually governed deployment practices that restrict scalability, security, and clinical responsiveness. This technical paper proposes an AWS-native modernization architecture that transforms legacy healthcare platforms into secure, interoperable, microservices-based systems supported by automated DevOps pipelines. The paper synthesizes research on electronic health record interoperability, FHIR-based integration, blockchain-enabled health data exchange, semantic data mapping, cloud-native systems, cybersecurity, healthcare analytics, and artificial intelligence to develop a structured modernization framework. The proposed model combines domain-oriented microservices, API-driven interoperability, container orchestration, automated CI/CD workflows, identity and access management, observability, and compliance-aware data governance. The analysis indicates that healthcare modernization should not be treated merely as infrastructure migration but as a socio-technical redesign of data, workflow, security, and operational governance. Findings suggest that AWS-native services can improve deployment reliability, horizontal scalability, auditability, and system resilience when combined with standardized clinical terminologies and secure interoperability layers. However, modernization also introduces risks related to vendor dependency, migration complexity, data quality, regulatory accountability, and organizational readiness. The paper concludes that a phased, security-by-design, interoperability-first architecture provides a practical pathway for healthcare institutions seeking to modernize legacy systems without disrupting clinical continuity.
Keywords
AWS-native architecture, healthcare information systems, legacy modernization, microservices
References
G. Anand and D. Sadhna, “Electronic health record interoperability using FHIR and blockchain: A bibliometric analysis and future perspective,” Perspectives in Clinical Research, vol. 14, 2023.
Q. An, S. Rahman, J. Zhou, and J. J. Kang, “A Comprehensive Review on Machine Learning in Healthcare Industry: Classification, Restrictions, Opportunities and Challenges,” Sensors, vol. 23, 2023.
Anonymous, “Current State of Electronic Health Record Interoperability,” 2024.
F. Amar, A. April, and A. Abran, “Electronic Health Record and Semantic Issues Using Fast Healthcare Interoperability Resources: Systematic Mapping Review,” Journal of Medical Internet Research, vol. 26, 2024.
J. D. Amos, Z. Zhang, Y. Tian, G. V. Lowry, M. R. Wiesner, and C. O. Hendren, “Knowledge and Instance Mapping: Architecture for Premeditated Interoperability of Disparate Data for Materials,” Scientific Data, vol. 11, 2024.
M. Ammi, O. Adedugbe, F. M. Alharby, and E. Benkhelifa, “Leveraging a cloud-native architecture to enable semantic interconnectedness of data for cyber threat intelligence.” Cluster Computing, vol. 25, no. 5, pp. 3629 - 3640, 2022.
A. Awad, S. J. Trenfield, T. D. Pollard, J. J. Ong, M. Elbadawi, L. E. McCoubrey, A. Goyanes, S. Gaisford, and A. W. Basit, “Connected healthcare: Improving patient care using digital health technologies,” Advanced Drug Delivery Reviews, vol. 178, 2021.
J. Benuzillo, L. A. Savitz, and S. Evans, “Improving Health Care with Advanced Analytics: Practical Considerations,” eGEMs (Generating Evidence & Methods to Improve Patient Outcomes), vol. 7, 2019.
M. A. Carter, J. L. Hayes, R. J. Miller, E. K. Thompson, and C. James, “AI-based intrusion detection for multi-cloud workloads.” 2025.
T. M. Chettier, V. A. K. Boyina, S. Jorepalli, C. Singh, and N. Gupta, “Scalable explainable AI with a cloud-native approach for cybersecurity threat detection.” In Proc. 2025 3rd Int. Conf. Advancement in Computation & Computer Technologies (InCACCT), Apr. 2025, pp. 686–691.
V. Chowdhry, P. Kharat, A. Nethi, A. Arora, et al., “Secure Scalable Real-Time Machine Learning Platform for Healthcare,” United States Patent Application, no. 17..., 2021.
D. Mauricio, P. C. Llanos-Colchado, L. S. Cutipa-Salazar, P. Castañeda, R. Chuquimbalqui-Maslucán, L. Rojas-Mezarina, and J. L. Castillo-Sequera, “Electronic Health Record Interoperability System in Peru Using Blockchain,” International Journal of Online and Biomedical Engineering, vol. 20, 2024.
S. D. Fihn, J. Francis, C. Clancy, C. Nielson, K. Nelson, J. Rumsfeld, T. Cullen, J. Bates, and G. L. Graham, “Insights from advanced analytics at the Veterans Health Administration,” Health Affairs, vol. 33, 2014.
S.-C. Haw, J. Jayaram, E. A. Anaam, and H. A. Santoso, “Exploring Recommender Systems in the Healthcare: A Review on Methods, Applications and Evaluations,” International Journal on Robotics, Automation and Sciences, vol. 6, pp. 6–15, 2024.
S.-C. Haw, L. J. Chew, D. S. Kusumo, P. Naveen, and K. W. Ng, “Mapping of extensible markup language-to-ontology representation for effective data integration,” IAES International Journal of Artificial Intelligence, vol. 12, 2023.
C. Huang, R. Koppel, J. D. McGreevey, C. K. Craven, and R. Schreiber, “Transitions from One Electronic Health Record to Another: Challenges, Pitfalls, and Recommendations,” Applied Clinical Informatics, vol. 11, 2020.
S. V. B. Jardim, “The Electronic Health Record and its Contribution to Healthcare Information Systems Interoperability,” Procedia Technology, vol. 9, 2013.
J. Jayaram, Y. Kulkarni, L. V. Ganesh, P. Naveen, and E. A. Anaam, “Treatment Recommendation using BERT Personalization,” Journal of Informatics and Web Engineering, vol. 3, pp. 41–62, 2024.
E. S. Klappe, E. Joukes, R. Cornet, and N. F. de Keizer, “Effective and feasible interventions to improve structured electronic health record data registration and exchange: A concept mapping approach and exploration of practical examples in the Netherlands,” International Journal of Medical Informatics, vol. 173, 2023.
M. Masunda, AI-powered intrusion detection systems leveraging deep learning for anomaly detection in large-scale distributed network topologies, unpublished.
M. Tang, L. W. Ang, and S. Palaniappan, “Comparative Analysis of Linear and Nonlinear sEMG Methods for Detecting Muscle Fatigue During Dynamic Biceps Curls,” Journal of Informatics and Web Engineering, vol. 3, pp. 121–132, 2024.
J. Thomas, S. McDonald, A. Noel-Storr, I. Shemilt, J. Elliott, C. Mavergames, and I. J. Marshall, “Machine learning reduced workload with minimal risk of missing studies: Development and evaluation of a randomized controlled trial classifier for Cochrane Reviews,” Journal of Clinical Epidemiology, vol. 133, 2021.
M. U. Tariq, “Revolutionizing Health Data Management With Blockchain Technology,” pp. 153–175, 2024.
P. S. Nikam, Customized Penetration Testing Framework for Assessing the Security of Amazon Web Services (AWS), Ph.D. dissertation, National College of Ireland, Dublin, Ireland, 2024.
E. Øvrelid, “Exploring adaptive mirroring in healthcare IT architectures,” Health Systems, vol. 13, 2024.
A. M. Rajput, K. Triep, and O. Endrich, “Semi-Automated Approach to Retrieve SNOMED CT Hierarchy of Clinical Terms by Using Terminology Server,” Studies in Health Technology and Informatics, vol. 301, 2023.
Y. Ramakrishnaiah, N. Macesic, G. I. Webb, A. Y. Peleg, and S. Tyagi, “EHR-QC: A streamlined pipeline for automated electronic health records standardisation and preprocessing to predict clinical outcomes,” Journal of Biomedical Informatics, vol. 147, 2023.
A. D. Samala and S. Rawas, “Transforming Healthcare Data Management: A Blockchain-Based Cloud Electronic Health Record System for Enhanced Security and Interoperability,” International Journal of Online and Biomedical Engineering, vol. 20, 2024.
M. Sharma and H. Aggarwal, “Methodologies of Legacy Clinical Decision Support System - A Review,” Journal of Telecommunication, Electronic and Computer Engineering, vol. 9, 2017.
S. Sung, H. A. Park, H. Jung, and H. Kang, “A SNOMED CT Mapping Guideline for the Local Terms Used to Document Clinical Findings and Procedures in Electronic Medical Records in South Korea: Methodological Study,” JMIR Medical Informatics, vol. 11, 2023.
A. Ugajin, “Automation in Hospitals and Health Care,” Springer Handbooks, Part F674, 2023.
A. Woller, A. Daw, V. Aston, J. Lloyd, G. Snow, S. M. Stevens, S. C. Woller, P. Jones, and J. Bledsoe, “Natural Language Processing Performance for the Identification of Venous Thromboembolism in an Integrated Healthcare System,” Clinical and Applied Thrombosis/Hemostasis, vol. 27, 2021.
K. Xing, S. S. R. Srinivasan, M. J. M. Rivera, J. Li, and X. Cheng, “Attacks and countermeasures in sensor networks: a survey.” in Network Security, Boston, MA, USA : Springer US, 2010, pp. 251 - 272.
K. Xiong, Z. Wu, and X. Jia, “Deepcontainer: a deep learning-based framework for real-time anomaly detection in cloud-native container environments.” Journal of Advanced Computing Systems, vol. 5, no. 1, pp. 1 - 17, 2025.
M. T.-T. Yong, S.-B. Ho, and C.-H. Tan, “Migraine Generative Artificial Intelligence based on Mobile Personalized Healthcare,” Journal of Informatics and Web Engineering, vol. 4, no. 1, pp. 275–291, 2025.
P. Zhang and M. N. Kamel Boulos, “Generative AI in Medicine and Healthcare: Promises, Opportunities and Challenges,” Future Internet, vol. 15, 2023.
Download and View Statistics
Copyright License
Copyright (c) 2026 Dr. Rizky Pratama Wijaya
This work is licensed under a Creative Commons Attribution 4.0 International License.
Authors retain the copyright of their manuscripts, and all Open Access articles are disseminated under the terms of the Creative Commons Attribution License 4.0 (CC-BY), which licenses unrestricted use, distribution, and reproduction in any medium, provided that the original work is appropriately cited. The use of general descriptive names, trade names, trademarks, and so forth in this publication, even if not specifically identified, does not imply that these names are not protected by the relevant laws and regulations.