Amazon Q
Detector Library
Trained on decades of knowledge and experience across millions of code reviews
About Amazon Q
You can use Amazon Q Developer to scans code and receive intelligent recommendations that improve code security and quality.
Detectors power the code reviewing capabilities of Amazon Q. Code reviewing capabilities are available through Amazon Q code reviews and Amazon Inspector code scanning.
Frequently asked questions
What is the Amazon Q Detector Library?
The Amazon Q Detector Library is a resource that contains detailed information about Amazon Q's security and code quality detectors to help developers build secure and efficient applications on AWS. Each detection page within the Detector Library contains descriptions, noncompliant and compliant example code snippets, severities, and additional information that helps developers mitigate their risks (such as CWE numbers). The materials presented in the Amazon Q Detector Library are intended to be a high-level summary of the service's capabilities but may not be inclusive of all detectors or their functionality.
How should I use the Amazon Q Detector Library?
You should review the Detector Library to get a deeper understanding of the capabilities of Amazon Q. Additionally, after reviewing your code resources in Amazon Q, you can use the detailed detection pages to help mitigate the findings you receive. You can also use this as an educational resource to help improve the overall security posture of your application and help ensure you are following AWS best practices.
How can I see Amazon Q code reviews in action?
You can see Amazon Q in action by using the Amazon Q example detection repository to review code. You can review code using Amazon Q's code reviewing capabilities available through Amazon Q code review or Amazon Inspector code scanning. The repository contains many of the noncompliant code examples that appear in this Detector Library.
How often are the detectors updated?
The Amazon Q team is continually adding new detectors to help you keep your applications free from new, potentially harmful security vulnerabilities.
Do the detectors only find the specific example within each detection page?
No. Each detector can detect a wide range of different code defects. We included one noncompliant and compliant code example on each detection page (such as insecure cryptography) to help clarify the detection. However, each detector can find a range of defects in addition to the explicit code example shown on the detection page.
Which detectors are available in Amazon Q and Amazon Inspector Code Scanning?
Amazon Q code reviews features hundreds of Amazon Q's code security detectors, as well as hundreds of code quality detectors that can be enabled through additional configuration. For a list of supported languages, see the Amazon Q Developer User Guide.
For a list of Amazon Inspector code scanning supported languages, see the Amazon Inspector User Guide. Amazon Inspector code scanning uses these detectors to scan Lambda functions.
How does Amazon Q determine what to include or exclude in a scan?
Before commencing a code review, Amazon Q applies filtering to ensure that only relevant customer code is reviewed. This ensures that the detected code issues are valuable to customers. As part of the filtering process, Amazon Q excludes unsupported languages, test code, and open source code.