Skip to main content
ShadowAI Defense GitHub
← All services

Amazon Web Services · Code Assistant

Amazon Q Developer (formerly CodeWhisperer)

Allow Enterprise Enterprise tier: Available DPA: Yes

Network signatures

Domains: codewhisperer.us-east-1.amazonaws.com, q.aws.amazon.com

API endpoints: codewhisperer.amazonaws.com

SNI patterns: *.amazonaws.com

Client signatures

Process names: aws-toolkit-vscode

Risk profile (1–5)

  • Data exfiltration: 3
  • IP loss: 3
  • Output quality (hallucination / legal): 3
  • Integration risk (OAuth, extensions, agentic): 2

Data egress concerns

  • Source code
  • AWS resource identifiers

Training-use default

Pro tier explicitly does not train on customer code. Free tier may use content for service improvement per AWS terms.

Applicable detection rules

References