Amazon Q Builder: Securing your code

on YouTube ↗14m

" summary

Amazon Q Developer integrates the Code Whisperer engine into IDEs (VS Code, IntelliJ; Neovim and Eclipse coming) to run SAST and infra-as-code checks on Java 17, JavaScript, Python, TypeScript, Go, Ruby, partial Rust, Terraform and CDK. A demo scans ~200 files, flags ~200 infos and three major issues and applies fixes inline. The service offers Amazon Q Developer with Code Whisperer, a free tier of 50 free scans/month, and automatic remediation in the IDE.

AI-written summary · about

" chapters (5)

1. 0:00Introduction to Amazon Q
2. 1:36Capabilities and features
3. 3:21Security scanning workflow
4. 8:17Development lifecycle integration
5. 11:07Pricing and getting started

" related talks

• 02mAWS Community Spotlight: Amazon CodeWhispererBrian Tarbox · AWS Developer Innovation Day 2023
• 42mAmazon Q: Your new assistant and guide for building with AWSRafael Ramos, Laura Al-Richane · AWS Summit Berlin 2024
• 48mFrom IDE to production: Actionable ML-powered code security analysisJas Chhabra, Ifeanyi Okafor, Omer Tripp · AWS re:Inforce 2023
• 22mIncreasing developer productivity with Generative AIBrooke Jamieson · AWS Developer Innovation Day 2023
• 20mThe New Stack: building software without limitsAlex C. Williams, Harry Mower, Doug Seven · AWS Developer Innovation Day 2023
• 31mAmazon CodeGuru and CodeWhisperer for Java Developers on AWSVadym Kazulkin · Cloud Builders: Java Conf 2023
• 59mAmazon Q Developer Code Transformations for Java.Anton Kovalenko · Java ON 2024
• 41mSupercharge your development with AWS GenAI developer toolsMarina Burkhardt, Hector Ibarra · AWS Summit Berlin 2024