I have an instance in Amazon EC2 and need to be HIPAA compliant. I have two doubts,
1. Should I need to do a block level encryption of the database storage.
2. Should I need to encrypt sensitive data before storing in the database.
3. Best database software to handle with the encryption
Any help will be highly appreciable,