Amazon Q Developer
Generative AI assistant from AWS with agentic capabilities for feature implementation, testing, refactoring and software upgrades.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-18
Amazon Q Developer is AWS's enterprise-grade coding assistant with autonomous agentic capabilities. As a major cloud vendor product, it benefits from strong institutional backing and professional maintenance. The agent can implement features, refactor code, run tests, and perform software upgrades, requiring substantial filesystem write access and shell execution permissions within development environments. Distribution through official IDE marketplaces (VS Code, JetBrains) and AWS CLI provides reasonable supply chain assurance. However, transparency is limited by its proprietary nature—no public repository, closed-source implementation, and opaque model training details. The freemium pricing model with enterprise tiers suggests commercial-grade support. No known security incidents, though the broad permissions needed for autonomous coding operations present inherent risk. Best suited for AWS-aligned teams comfortable with commercial tooling.
Green flags
- Backed by AWS with enterprise-grade support and SLAs
- Distributed via official IDE marketplaces (VS Code, JetBrains)
- Professional maintenance from major cloud vendor
- No known security incidents or credential leaks
- Freemium model allows evaluation before commitment
Red flags
- Closed source with no public repository for security review
- Autonomous agent requires broad filesystem and shell access
- Proprietary model with undisclosed training data and capabilities
- Limited transparency into decision-making and code generation process
Permissions requested
Pricing
Platforms
Review
Pay for it if AWS is your primary cloud and you spend meaningful time on infrastructure code, upgrades, or security reviews. Skip it if you work outside the AWS ecosystem or need an agent that handles arbitrary codebases with equal skill.
Good at
- Agentic mode handles multi-file refactors and upgrades with minimal supervision
- Deep AWS integration: live account context, IAM policy generation, service-aware suggestions
- Security scanning catches real issues like overly permissive policies and outdated dependencies
- Freemium tier is generous enough for individual developers to evaluate properly
- Works across VSCode, JetBrains, and CLI for flexible workflows
Watch out
- Weak outside the AWS ecosystem; generic code tasks lag behind Cursor or Windsurf
- Struggles with legacy codebases that lack clear structure or have circular dependencies
- CLI agent feels underbaked compared to the IDE extensions
- Limited access to external library documentation beyond AWS SDKs
- Pricing scales quickly for teams; $19/user/month adds up
Use cases
- AWS workflows
- code upgrades
- security scanning