Accelerating Coding with Amazon CodeWhisperer (Now Amazon Q Developer) - AI Code Suggestions and Security Scanning
It generates code suggestions in real time within the IDE and provides OWASP Top 10 security scanning and open source license reference detection at the same time. This article also introduces tips for using it effectively. CodeWhisperer was integrated into Amazon Q Developer in 2024.
CodeWhisperer Overview
CodeWhisperer is an AI coding companion that generates code suggestions in real time within the IDE. It is available in VS Code, JetBrains IDEs, and AWS Cloud9, and it automatically generates functions, classes, and test code from comments and the context of existing code. CodeWhisperer has been integrated into Amazon Q Developer, and code completion can be used as a feature of Amazon Q Developer.
Security Scanning and License Detection
Security scanning analyzes code files and detects vulnerability patterns included in the OWASP Top 10. The findings include CWE numbers and fix suggestions, which help you understand and fix vulnerabilities. License reference detection flags generated code when it resembles open source training data and presents the corresponding open source project and license (such as MIT or Apache 2.0). It helps you use code in compliance with your organization's license policy.
Organizational Adoption and Management
For organizational use (the current Q Developer Pro plan), user management across the entire organization is handled in conjunction with IAM Identity Center. Administrators can check the acceptance rate of code suggestions, the number of security scan findings, and usage by user on a dashboard. To get suggestions that follow your organization's coding conventions, you use the customization feature, with which CodeWhisperer learns the code styles and patterns in your repositories. The reference tracker displays the source and license information when suggested code resembles publicly available code. Individual use can be started for free (before the integration, the Individual tier had unlimited code suggestions and up to 50 security scans per month).
Tips and Limitations for Effective Use
The content of CodeWhisperer's suggestions changes depending on how you provide context. If you specifically describe the input / output types and the processing in a function's documentation comment, more accurate code is generated. Conversely, if comments are ambiguous or there is insufficient context in the file, overly generic code or incorrect logic may be suggested. You review the generated code and check whether error handling, edge case handling, and security considerations are appropriate. The accuracy of generated code differs depending on the type of code. One way to use it is to have it suggest the corresponding unit tests from a function's implementation.
Pricing - Plans After the Q Developer Integration
The former plan structure of standalone CodeWhisperer, Individual / Professional, was discontinued with the 2024 integration into Amazon Q Developer. There are currently two plans: the Q Developer Free plan (free / with monthly usage limits) and the Pro plan ($19 per user per month). Code suggestions and security scanning are provided as features of Q Developer (as of August 2026). Q Developer has a Free plan that you can start using for free.
Supported Environments and How Suggestions Work
A code suggestion tool is used by building it into the integrated development environment (IDE) that developers use. It reads the context in which you are writing code and the intent written in comments, and presents candidates on the spot for the code that follows or for entire functions. Developers check the presented candidates, adopt them if they are appropriate, and ignore them and keep writing if they do not fit. It supports multiple languages, so you can receive assistance naturally without interrupting your usual development flow. You can reduce the effort of typing and move implementation forward while keeping your train of thought.
Streamlining Routine Processing and Learning APIs
One situation where code suggestions are used is routine processing that you write repeatedly. You can quickly generate boilerplate such as data formatting, file reading and writing, and common error handling, and increase the time you spend focusing on essential logic. When you work with unfamiliar libraries or APIs, candidates for how to call them are shown, so you can reduce the effort of looking up documentation. By lightening the burden of simple tasks and lowering the barrier to entry for new technologies, it allows developers to concentrate on more creative parts.
Code Quality and Responsibility for Verification
You check the content of generated code instead of trusting it as is. Suggestions may include implementations that differ from your intent or ways of writing that do not meet the requirements. Before adopting it, the developer is responsible for understanding its content and confirming that it meets the requirements. You also write tests for generated code and verify that it works as expected. You also check whether security problems have been introduced. The tool is positioned not as a substitute for thinking but as a tool that raises productivity, and the developer ensures quality.
Summary
Amazon Q Developer (formerly CodeWhisperer) is a service that provides AI code suggestions and security scanning within the IDE. You can now start with the Amazon Q Developer Free plan and use it for automatic code completion, function generation, and detecting security vulnerabilities.
References (Official AWS Resources)
The primary sources for this page are the official AWS website and documentation. Check the official pages below for the latest specifications and pricing.
- Amazon CodeWhisperer official page
- Amazon CodeCatalyst official page
- AWS CodeBuild official page
- AWS Documentation (official)
If this page and the official documentation disagree, treat the official documentation as authoritative.