{
  "entry": {
    "kind": "extension",
    "slug": "amazon-q-developer",
    "name": "Amazon Q Developer",
    "vendor": "Amazon Web Services",
    "description": "Amazon Q Developer is AWS's AI coding assistant, shipping as an extension for VS Code, JetBrains IDEs, and Visual Studio. It offers inline completion, chat over your workspace, an agentic mode that can implement multi-file changes, and AWS-specific abilities such as explaining a CloudFormation template or upgrading a Java runtime across a codebase.\n\nIts distinguishing capability is the cloud connection: signed in with AWS credentials, it can read account context and act against AWS APIs, which is materially broader than a code-completion extension. Combined with workspace reads and writes and outbound calls to the model service, that puts it in the higher band of this catalog. The upgrade and transformation features in particular make sweeping automated edits — review those as you would a large refactor PR, and scope the IAM role it authenticates with rather than reusing an administrator profile.",
    "website": "https://aws.amazon.com/q/developer/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "filesystem:read",
      "filesystem:write",
      "network:outbound",
      "credentials:access"
    ],
    "packaging": {
      "manager": "vsix",
      "packageName": "AmazonWebServices.amazon-q-vscode"
    },
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 45,
      "band": "medium",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "2 high-risk capabilities: filesystem:write, credentials:access",
          "contribution": 20
        },
        {
          "id": "credential-theft-risk",
          "kind": "combination",
          "label": "Credential theft risk (high)",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "contribution": 15
        }
      ],
      "dangerousCombos": [
        {
          "id": "credential-theft-risk",
          "name": "Credential theft risk",
          "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
          "capabilities": [
            "filesystem:write",
            "credentials:access"
          ],
          "severity": "high"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "credential-theft-risk",
        "name": "Credential theft risk",
        "description": "Filesystem write combined with credentials access can plant persistent credential stealers.",
        "capabilities": [
          "filesystem:write",
          "credentials:access"
        ],
        "severity": "high"
      }
    ]
  }
}