As of November 7, 2025, you can't create new repository associations in Amazon CodeGuru Reviewer. To learn about services with capabilities similar to CodeGuru Reviewer, see [Amazon CodeGuru Reviewer availability change](https://docs.aws.amazon.com/codeguru/latest/reviewer-ug/codeguru-reviewer-availability-change.html).

# Recommendation types in CodeGuru Reviewer
<a name="recommendations"></a>

Amazon CodeGuru Reviewer recommends various kinds of fixes in your Java and Python code. These recommendations are based on common code scenarios and might not apply to all cases. 

If you don't agree with a recommendation, you can [provide feedback](provide-feedback.md) in the CodeGuru Reviewer console or by commenting on the code in the pull requests. Any positive or negative feedback can be used to help improve the performance of CodeGuru Reviewer so that recommendations get better over time.

If you want to suppress recommendations from CodeGuru Reviewer, you can create and add to the root directory of your repository an `aws-codeguru-reviewer.yml` file that lists files and directories to exclude from analysis. For more information, see [Suppress recommendations](recommendation-suppression.md). 

The following content describes the secrets detection functionality of CodeGuru Reviewer. For information about the other recommendation types and the detectors that CodeGuru Reviewer uses, see the [Amazon CodeGuru Reviewer Detector Library](https://docs.aws.amazon.com/codeguru/detector-library/index.html).

## Secrets detection
<a name="secrets-detection"></a>

CodeGuru Reviewer integrates with AWS Secrets Manager to use a secrets detector that finds unprotected secrets in your code. Secrets detection is automatic, so you don't need to turn it on. 

The secrets detector searches for hardcoded passwords, database connection strings, user names, and more. When an unprotected secret is found during a code review, CodeGuru Reviewer generates a recommendation and displays it with your code reviews. The recommendation tells you about the unprotected secret. To immediately protect that secret, choose **Protect your credential** in the code review. This opens the Secrets Manager console to protect and manage the secret. For more information, see the [AWS Secrets Manager User Guide](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) and [View recommendations and provide feedback](give-feedback-from-code-review-details.md).

**Topics**
+ [

### Secrets detection supported file types
](#secrets-file-extension-support)
+ [

### Types of secrets detected by CodeGuru Reviewer
](#secrets-found-types)

### Secrets detection supported file types
<a name="secrets-file-extension-support"></a>

The secrets detector finds unprotected secrets the following file types with a maximum file size of 100kb.
+ Config files (\$1.config, \$1.cfg, \$1.conf, \$1.cnf, \$1.cf)
+ Environment files (\$1.env)
+ HTML files (\$1.html)
+ Initialization files (\$1.ini)
+ Java files (\$1.java)
+ JSON files (\$1.json)
+ Jupyter Notebook files (\$1.ipynb)
+ Key files (\$1.key)
+ Markdown files (\$1.md)
+ Privacy Enhanced Mail files (\$1.pem)
+ Property List files (\$1.plist)
+ Python files (\$1.py)
+ reStructuredText files (\$1.rst)
+ Text files (\$1.txt, \$1.text)
+ TOML files (\$1.toml)
+ XML files (\$1.xml)
+ YAML files (\$1.yml, \$1.yaml)

### Types of secrets detected by CodeGuru Reviewer
<a name="secrets-found-types"></a>

Amazon CodeGuru Reviewer detects unprotected usernames, passwords, RSA keys, and the following secrets.


**Secrets detected by CodeGuru Reviewer**  

| Provider | Secrets detected | 
| --- | --- | 
| Amazon Web Services (AWS) |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Atlassian |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Databricks |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Datadog |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| GitHub |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Intercom |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Mailchimp |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Mailgun |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Salesforce |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| SendGrid |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Shopify |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Slack |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Stripe |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Tableau |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Telegram |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  | 
| Twilio |  [\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/codeguru/latest/reviewer-ug/recommendations.html)  |