{
"canonical_url": "aws.amazon.com/q/developer",
"category": "Coding/enterprise agent",
"commercial": true,
"compliance": [
{
"certificate_id": "amazon",
"covers_resource": "unknown",
"credited": true,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Amazon",
"terms": [
"star_level_1",
"star_level_2",
"caiq",
"certification"
]
},
"display": "STAR Level 2: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/amazon",
"framework": "csa_star",
"issued": "2020-11-06",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:34Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_2"
},
{
"certificate_id": "F1603047866",
"covers_resource": "inherited",
"credited": true,
"detail": {
"cso": "AWS GovCloud",
"csp": "Amazon",
"deployment_model": "Government Community Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "High"
},
"display": "FedRAMP High: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/F1603047866",
"framework": "fedramp",
"issued": "2016-06-21",
"issuer": "JAB / 3PAO Coalfire Systems, Inc.",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:24:27Z",
"review_reason": "vendor authorization for AWS GovCloud; entity 1.00",
"reviewer": null,
"scope": "entity",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_HIGH"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "csa_star",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials Plus: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS_PLUS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "dora",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "fedramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/?nc2=h_dsc_aa_cmp",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "0e0a7b37da7500f1036149efdd8802753581ea33208b9ef38fa43abd8bb43375",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "DPA available: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "DPA_AVAILABLE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "DPF active: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "DPF_ACTIVE"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "govramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "hitrust",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "irap",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27017: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27017"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27018: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27018"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27701: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "iso27701",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27701"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 42001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "iso42001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO42001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "pci_dss",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://aws.amazon.com/compliance/programs/",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "f051b289205f9d1066a22d78be4d0dedafc53e6ed605567f54699a552107099b",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:19Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "AWS; IDEs; CLI",
"description": "AWS-native developer agent integrated with cloud development and operations.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 23.8,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "general",
"rank": 9,
"recomputed": 95.0,
"score": 88.5,
"score_version": "sar-score-2.0",
"seed_rank": 9,
"seed_score": 95.0,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "security",
"rank": 15,
"recomputed": 83.4,
"score": 85.4,
"score_version": "sar-score-2.0",
"seed_rank": 15,
"seed_score": 83.4,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "data",
"rank": 28,
"recomputed": 88.6,
"score": 93.4,
"score_version": "sar-score-2.0",
"seed_rank": 28,
"seed_score": 88.6,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.15,
"pci_dss": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 36,
"recomputed": 77.8,
"score": 81.1,
"score_version": "sar-score-2.0",
"seed_rank": 36,
"seed_score": 77.8,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 36.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"fedramp": 0.5,
"iso27001": 0.15,
"iso42001": 0.15
},
"profile": "regulated",
"rank": 6,
"recomputed": 96.1,
"score": 83.2,
"score_version": "sar-score-2.0",
"seed_rank": 6,
"seed_score": 96.1,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"hitrust": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 28,
"recomputed": 77.8,
"score": 81.1,
"score_version": "sar-score-2.0",
"seed_rank": 28,
"seed_score": 77.8,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 20.8,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"iso27001": 0.15,
"iso42001": 0.15,
"pci_dss": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 21,
"recomputed": 77.8,
"score": 80.9,
"score_version": "sar-score-2.0",
"seed_rank": 21,
"seed_score": 77.8,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 22,
"recomputed": 77.8,
"score": 81.1,
"score_version": "sar-score-2.0",
"seed_rank": 22,
"seed_score": 77.8,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 34,
"recomputed": 77.8,
"score": 81.1,
"score_version": "sar-score-2.0",
"seed_rank": 34,
"seed_score": 77.8,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"gdpr": 0.15,
"iso27701": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "commercial",
"rank": 21,
"recomputed": 85.8,
"score": 89.5,
"score_version": "sar-score-2.0",
"seed_rank": 21,
"seed_score": 85.8,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 23.8,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "operations",
"rank": 14,
"recomputed": 82.9,
"score": 89.9,
"score_version": "sar-score-2.0",
"seed_rank": 14,
"seed_score": 82.9,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 22.0,
"health": 20.0,
"trust": 19.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.15,
"soc2": 0.15
},
"profile": "technology",
"rank": 8,
"recomputed": 98.0,
"score": 93.1,
"score_version": "sar-score-2.0",
"seed_rank": 8,
"seed_score": 98.0,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_460fe8bf3c8f30c6",
"identity": {
"evidence": [
"vendor_domain_product_page"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 1,
"incidents": 0,
"links": [
{
"date": "2025-07-30",
"kind": "cve",
"title": "CVE-2025-8217",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8217"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:11:40Z",
"license": "AWS service",
"name": "Amazon Q Developer",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:21:40Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:21:39Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_at": "2026-10-26T12:21:41Z",
"parser_version": "mcp-2025-06-18",
"status": "not_found"
}
},
"publisher_domain": "aws.amazon.com",
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:31:37Z",
"cves": 1,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 28.0,
"docs": 10.0,
"domain_fit": 99.0,
"ecosystem": 15.0,
"governance": 45.0,
"health": 20.0,
"trust": 25.0
},
"signals": {
"observed_popularity": "Commercial"
},
"slug": "aws-amazon-q-developer",
"sources": [
{
"payload_hash": "3af66037d05144986bcd453fc7b66f17bcffb50e292bdc7081b2e4074a44961a",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://aws.amazon.com/q/developer/"
}
],
"tags": [],
"tenant": null,
"traces": [
{
"checked_on": null,
"date": "2025-07-23",
"format": "report",
"id": "tr_amazon_q_wiper_prompt_2025",
"kind": "incident",
"notes": "An incident about the agent's supply chain rather than its runtime behaviour; listed because defenders asked for exactly this kind of visibility",
"observed": {
"actions": [
"extension shipped with an embedded instruction to delete local files and AWS resources",
"instruction was malformed enough not to execute as intended"
],
"approval": null,
"egress": null,
"entry": "supply-chain: a contributed prompt merged into the shipped extension",
"outcome": "No confirmed destructive runs; AWS pulled v1.84.0 and released v1.85.0 and later said the code would not have executed",
"refused": null,
"secrets_touched": null
},
"reviewer": null,
"scenario": "A pull request from an unverified account added a system prompt instructing the agent to wipe the user's file system and cloud resources; the release shipped with it",
"scope": "product",
"source": "BleepingComputer (incident reporting)",
"tier": 2,
"title": "Malicious prompt injected into the Amazon Q Developer VS Code extension release (v1.84.0)",
"url": "https://bleepingcomputer.com/news/security/amazon-ai-coding-agent-hacked-to-inject-data-wiping-commands",
"vendor_response": "Version 1.84.0 removed; AWS security bulletin"
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 3,
"protocols": 5,
"security": 1,
"traces": 2,
"vendor_compliance": 1
},
"url": "https://aws.amazon.com/q/developer/",
"vendor": "AWS"
}