Amazon Q Developer (formerly CodeWhisperer) is AWS's AI coding assistant that has evolved from a basic completion tool to the most deeply integrated AWS development accelerator available in 2026 — understanding your AWS infrastructure, suggesting security remediations from AWS security findings, generating CloudFormation/CDK templates from natural language, and automating Java application upgrades. For engineering teams building on AWS, Q Developer provides capabilities that no other coding assistant offers for the AWS ecosystem specifically. This guide covers every Q Developer feature, enterprise configuration, and the use cases where it delivers the most value.
What Is Amazon Q Developer?
Amazon Q Developer — 2026 Capabilities
Amazon Q Developer is an AI assistant embedded in AWS Console, IDE (VS Code, JetBrains), CLI, and CI/CD pipelines that provides: (1) AI code completion and chat for general programming; (2) AWS-specific code generation — CDK, CloudFormation, Lambda, Terraform for AWS; (3) Security scanning — identifies OWASP Top 10 and AWS-specific security issues with automated remediation; (4) /transform command — automatically upgrades Java 8/11 applications to Java 17/21; (5) AWS Console integration — natural language to AWS configuration. Q Developer Pro tier adds administrator controls, higher usage limits, and enterprise SSO.
What Makes Q Developer Uniquely Valuable for AWS Teams
| Feature | Q Developer Capability | vs Generic Coding Tools |
|---|---|---|
| CDK/CloudFormation generation | Context-aware AWS infrastructure code with service knowledge | Generic tools produce syntactically correct but often misconfigured AWS code |
| AWS Security scanning | AWS-specific vulnerability detection (IAM over-permission, S3 misconfiguration) | General SAST tools miss AWS-specific security patterns |
| Java transformation | Automated Java 8→17 upgrade including dependencies and deprecated APIs | No equivalent in other AI coding tools |
| AWS Console integration | Natural language queries in AWS Console + cross-service troubleshooting | No equivalent — Q is embedded in Console natively |
| AWS documentation | Trained on all AWS documentation and service APIs — accurate AWS-specific answers | General models have stale or inaccurate AWS API knowledge |
Free
Amazon Q Developer Free tier — 50 inline chat interactions and 50 code generation interactions per month. Sufficient for evaluation; Q Developer Pro ($19/user/month) for teams
/transform
Q Developer's Java transformation command — the only AI tool that automatically upgrades Java 8/11 applications to Java 17/21, updating deprecated APIs and dependencies. Saves weeks of manual upgrade work
OWASP
Security scan coverage — Q Developer's built-in security scanner detects OWASP Top 10 vulnerabilities plus AWS-specific issues (IAM privilege escalation, hardcoded credentials, S3 bucket exposure) with automated fix suggestions
Infrastructure-as-Code Generation
Describe your AWS architecture in natural language: "Create a CDK stack with an ALB, ECS Fargate service, RDS PostgreSQL with multi-AZ, and S3 bucket with versioning and lifecycle policies." Q Developer generates complete, properly configured CDK or CloudFormation code with AWS best practices applied — correct IAM least-privilege policies, VPC subnet placement, security group rules. Saves hours of CDK documentation lookup and configuration work. Our DevOps team integrates Q Developer into infrastructure workflows.
Security Remediation
Q Developer integrates with AWS Security Hub and CodeGuru Security to provide AI-suggested remediations for security findings — not just identifying issues but generating the fixed code. For teams with large security finding backlogs, Q Developer automated remediations can clear common vulnerability patterns (hardcoded secrets, overly permissive IAM, missing encryption) at a rate manual remediation cannot match.
Java Upgrade Automation
The /transform command in Q Developer IDE plugin upgrades Java 8/11 Maven projects to Java 17/21 — updating deprecated APIs, replacing removed classes, updating pom.xml dependencies, and adapting code patterns that changed between versions. AWS reports 60–70% of the upgrade work is automated; engineer reviews and completes the remainder. For enterprises with large legacy Java codebases on AWS, this capability alone justifies Q Developer Pro subscription.
AWS Console Troubleshooting
Q in AWS Console answers natural language questions about your live AWS infrastructure: "Why is my Lambda function timing out?", "Which EC2 instances are not in any Auto Scaling Group?", "Show me all S3 buckets without server-side encryption." Q reads your account context and AWS documentation simultaneously — far more accurate than generic model answers about AWS configuration. Available in the AWS Console sidebar at no additional cost with any Q Developer subscription.
Amazon Q Developer Enterprise Setup
Our DevOps and software development teams help AWS-focused engineering organisations configure and roll out Amazon Q Developer Pro — including SSO, usage policies, and developer enablement. Book a free advisory session.