Amazon CodeGuru Security Amazon Q Developer (Security Scanning & Code Review)
Legacy names Amazon CodeGuru Security, Amazon CodeGuru Reviewer, Amazon CodeGuru Profiler
Automated static application security testing (SAST), secrets detection, software composition analysis (SCA), and code quality review integrated into IDEs and GitHub/GitLab workflows.
Naming timeline
- Amazon CodeGuru (Reviewer & Profiler)
Launched with CodeGuru Reviewer for automated static code reviews and CodeGuru Profiler for runtime performance profiling.
- Amazon CodeGuru Security
Expanded static application security testing (SAST) and vulnerability detection service powering IDE and CI/CD scans.
- Amazon Q Developer (Security Scanning & Code Review)Current name
Security scanning and code quality detectors consolidated into Amazon Q Developer code reviews; new CodeGuru Reviewer repository associations discontinued on November 7, 2025.
What replaced Amazon CodeGuru Security?
Amazon CodeGuru Security has been superseded by Amazon Q Developer (Security Scanning & Code Review), with the latest change on 3 December 2024 (Consolidation & CodeGuru Reviewer Deprecation (Nov 7, 2025)). Earlier names covered by this entry also include Amazon CodeGuru Reviewer, Amazon CodeGuru Profiler. Automated static application security testing (SAST), secrets detection, software composition analysis (SCA), and code quality review integrated into IDEs and GitHub/GitLab workflows. The underlying legacy API or CLI surface is deprecated, so a technical migration is required.
Also known as
- Amazon CodeGuru
- Amazon Q Developer Security Scans
- Amazon Q Code Reviews
Technical identifiers
Legacy identifiers deprecated. The underlying API or CLI surface for the legacy name is officially deprecated, so this change requires a technical migration rather than a label update.
| AWS Service APIs / SDKs | codeguru-reviewer codeguru-security codeguru-profiler |
|---|---|
| AWS CLI Commands | aws codeguru-reviewer aws codeguru-security aws codeguru-profiler |
| IAM Actions & Policies | codeguru-reviewer:* codeguru-security:* codeguru-profiler:* codewhisperer:StartCodeAnalysis codewhisperer:GetCodeAnalysis |
| Terraform Resources (aws_*) | aws_codegurureviewer_repository_association aws_codeguruprofiler_profiling_group |
Standalone CodeGuru Reviewer stopped accepting new repository associations on November 7, 2025, and standalone CodeGuru Security was retired in favor of Amazon Q Developer code reviews (codewhisperer:StartCodeAnalysis) and Amazon Inspector.
Notes & disambiguation
- Amazon CodeGuru Security detectors and static analysis capabilities were integrated directly into Amazon Q Developer (originally surfaced as Security Scans and renamed to Amazon Q Code Reviews on December 3, 2024), while the standalone CodeGuru Security documentation and console were retired.
- Effective November 7, 2025, AWS closed Amazon CodeGuru Reviewer to new repository associations, directing customers to Amazon Q Developer code reviews (in IDEs, GitHub, and GitLab Duo) and Amazon Inspector Code Security for repository vulnerability scanning.
- Standalone CodeGuru APIs (codeguru-reviewer, codeguru-security, codeguru-profiler), CLI commands, and Terraform resources (aws_codegurureviewer_*, aws_codeguruprofiler_*) are legacy primitives superseded by Amazon Q Developer (codewhisperer:StartCodeAnalysis / q:*).
Sources & official documentation
Catalog last updated . Spotted an error? Suggest an edit