Amazon CodeWhisperer (now part of Amazon Q Developer) is an AI coding companion that generates, explains and scans code directly in the IDE and command line.
CodeWhisperer is Amazon’s ML-powered developer assistant, trained on a broad corpus of open-source and AWS code. It produces context-aware code suggestions in real time, supports dozens of languages and integrates with popular IDEs plus the AWS CLI and console. Built-in security scanning flags vulnerabilities such as injection flaws and hard-coded credentials, and reference tracking lets teams identify suggestions that resemble open-source code. Because it is deeply tied to AWS services, it is especially fluent in cloud SDK usage, infrastructure code and Lambda authoring.
Individuals can use CodeWhisperer for free with generous limits. Professional and Enterprise tiers add organizational controls, higher throughput and deeper security features, billed per user per month.
It fits developers building on AWS, from solo builders to enterprise engineering orgs that want AI assistance with built-in security scanning and administrative governance.
Install the AWS Toolkit or the standalone extension, sign in and open your project; CodeWhisperer begins suggesting completions as you type, with multi-line blocks for common AWS patterns. Ask the chat for explanations or transformations, and run the built-in security scan to surface vulnerabilities with suggested fixes. Reference tracking flags suggestions resembling open-source code so licensing stays visible.
It is strongest in AWS-heavy codebases — Lambda functions, SDK calls and infrastructure glue benefit most from its training. Run the security scan before merge requests rather than at release; early feedback is cheaper to fix. Teams with compliance needs should enable the enterprise tier’s logging and policy controls at the start, not after developers have adopted it widely.
Yes, the Individual tier is free. Teams that need shared settings, policy controls and priority capacity pay for Professional or Enterprise plans.
Its capabilities surface through IDE plugins, the AWS Toolkit and the CLI; enterprise automation is handled through AWS-side administration rather than a standalone public API.
Its AWS fluency and integrated security scanning set it apart from general copilots, particularly for cloud-native development on the AWS platform.
It supports dozens of popular languages including Python, Java, JavaScript, TypeScript and C#, with the deepest fluency in AWS SDK usage. Cloud infrastructure code and Lambda functions are particular strengths of the model.