Amazon CodeGuru

Question 1

Amazon CodeGuru ?

Answer 1

Amazon CodeGuru provides intelligent recommendations to improve code quality and identify an application’s most expensive lines of code.

You can integrate CodeGuru into existing software development workflows to automate code reviews.

CodeGuru continuously monitors an application’s performance in production.

Provides recommendations and on how to improve code quality, application performance, and reduce overall cost.

Question 2

CodeGuru can detect many security issues such as ?

Answer 2

1. OWASP Top 10: checks for top web application security risks such as broken access control, injection, and data integrity failures
2. AWS API security best practices: check API security for Amazon Elastic Compute Cloud and AWS Key Management Service
3. AWS security best practices (AWS crypto is implemented to Amazon’s standards): apply Amazon’s internal security expertise to your code
4. Java crypto library best practices: check if Javax.Crypto.Cipher is initialized and called correctly
5. Python crypto library best practices: check if correct versions of Python hashing and cryptography algorithms are used
6. Secure web applications: check app-related security issues, such as LDAP injections
7. Sensitive information leaks: check for any leakage of personal or sensitive information (example: logging AWS account credentials in plain text)
8. Input validation: checks for malformed or malicious data from untrusted sources

Question 3

CodeGuru provides secrets detection, where ?

Answer 3

CodeGuru provides secrets detection for detecting secrets that are hardcoded in cod repositories or configuration files.

Can detect API keys, passwords, SSH keys, access token, database connections strings and more.

Question 4

Code Quality Features

Answer 4

CodeGuru Reviewer identifies quality issues in your code.

Ensures best practices are followed such as correct use of AWS APIs.

Provides best practice detection for programming languages such as Java and Python.