Skip to content

Amazon Q Cheat Sheet

Amazon Q is AWS’s AI-powered coding assistant that provides intelligent code suggestions, security scanning, and application modernization capabilities. It integrates with popular IDEs and AWS services to enhance developer productivity with context-aware recommendations and automated code generation.

⚠️ Note: Requires AWS account and appropriate IAM permissions. Some features require Amazon Q subscription.

# Install Amazon Q extension from VS Code marketplace
code --install-extension AmazonWebServices.amazon-q-vscode

# Alternative: Search "Amazon Q" in Extensions tab
# Install via JetBrains Plugin Repository
# File > Settings > Plugins > Marketplace
# Search "Amazon Q" and install
# Install AWS CLI v2
curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "awscliv2.zip"
unzip awscliv2.zip
sudo ./aws/install

# Configure credentials
aws configure
# Sign in through IDE extension
# Click "Sign in to Amazon Q" in IDE
# Choose authentication method:
# - AWS Builder ID (free tier)
# - IAM Identity Center
# - AWS credentials
# Create free AWS Builder ID account
# Provides basic code suggestions
# Limited monthly usage
# Requires AWS subscription ($20/month per user)
# Advanced features including:
# - Security scanning
# - Code explanations
# - Unit test generation
# - Application modernization
# Automatic suggestions while typing
# Press Tab to accept suggestion
# Press Esc to dismiss suggestion

# Multi-line code generation
# Type comment describing function
# Amazon Q generates implementation

# Example:
# Type: "// Function to sort array of objects by name"
# Press Enter and Amazon Q suggests implementation
# Open chat panel in IDE
# Ask questions about code
# Request explanations
# Get help with debugging

# Example queries:
"Explain this function"
"How to optimize this code?"
"Write unit tests for this class"
"Convert this to TypeScript"
# Automatic security vulnerability detection
# Real-time scanning while coding
# Suggestions for security fixes

# Manual security scan
# Right-click in editor
# Select "Amazon Q: Scan for security issues"
# Install Amazon Q CLI
npm install -g @aws/amazon-q-cli

# Initialize in project
amazon-q init

# Ask questions
amazon-q ask "How to deploy this to AWS?"

# Generate code
amazon-q generate --prompt "Create REST API endpoint"

# Analyze code
amazon-q analyze --file src/main.js
# Use Amazon Q with AWS CLI
aws q ask "How to create S3 bucket with encryption?"

# Get help with AWS services
aws q explain ec2 describe-instances

# Troubleshoot AWS issues
aws q troubleshoot --service lambda --error "Function timeout"
# Command Palette (Ctrl+Shift+P)
"Amazon Q: Open Chat"
"Amazon Q: Explain Code"
"Amazon Q: Generate Unit Tests"
"Amazon Q: Optimize Code"
"Amazon Q: Security Scan"
"Amazon Q: Transform Code"

# Keyboard shortcuts
Ctrl+I          # Inline code generation
Alt+C           # Open chat
Ctrl+Shift+A    # Explain selected code
# Tools menu
Tools > Amazon Q > Open Chat
Tools > Amazon Q > Explain Code
Tools > Amazon Q > Generate Tests

# Context menu (right-click)
"Ask Amazon Q"
"Explain with Amazon Q"
"Generate tests with Amazon Q"
// Type comment and let Amazon Q generate
// Function to validate email address
function validateEmail(email) {
    const emailRegex = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
    return emailRegex.test(email);
}
# Generate Flask API endpoint
# POST endpoint to create user
@app.route('/users', methods=['POST'])
def create_user():
    data = request.get_json()
    user = User(
        name=data['name'],
        email=data['email']
    )
    db.session.add(user)
    db.session.commit()
    return jsonify({'id': user.id}), 201
// Generate Jest tests for function
describe('validateEmail', () => {
    test('should return true for valid email', () => {
        expect(validateEmail('test@example.com')).toBe(true);
    });
    
    test('should return false for invalid email', () => {
        expect(validateEmail('invalid-email')).toBe(false);
    });
});
# Transform legacy code to modern frameworks
# Select code block
# Right-click > "Transform with Amazon Q"
# Choose target framework (React, Vue, Angular, etc.)
# Convert between programming languages
# Select code in source language
# Ask Amazon Q: "Convert this Java code to Python"
# Review and accept suggestions
# Upgrade to newer framework versions
# Ask Amazon Q: "Upgrade this React class component to hooks"
# Get step-by-step migration guidance
# Automatic scanning for:
# - SQL injection vulnerabilities
# - Cross-site scripting (XSS)
# - Insecure dependencies
# - Hardcoded secrets
# - Authentication issues
# Get security recommendations
# Ask Amazon Q: "How to secure this API endpoint?"
# Receive suggestions for:
# - Input validation
# - Authentication
# - Authorization
# - Data encryption
# Check code against compliance standards
# OWASP Top 10
# CWE (Common Weakness Enumeration)
# AWS security best practices
# Create custom code generation prompts
# Define templates for common patterns
# Share prompts across team

# Example custom prompt:
"Generate CRUD operations for {entity} with validation and error handling"
# Amazon Q analyzes entire workspace
# Understands project structure
# Provides context-aware suggestions
# Maintains consistency across files
# Generate AWS infrastructure code
# Ask: "Create Lambda function with API Gateway"
# Get CloudFormation/CDK templates
# Deploy directly to AWS
# Extension not working
# Check AWS credentials configuration
# Verify internet connection
# Restart IDE

# No code suggestions
# Check if Amazon Q is enabled in settings
# Verify file type is supported
# Check subscription status
# Improve suggestion speed
# Close unnecessary files
# Reduce workspace size
# Update to latest extension version

# Manage suggestion frequency
# Adjust settings in IDE preferences
# Configure trigger delay
# Set suggestion limits
# View Amazon Q logs
# VS Code: View > Output > Amazon Q
# IntelliJ: Help > Show Log in Explorer

# Report issues
# Use "Send Feedback" in extension
# Include error logs and reproduction steps
# Write descriptive comments for better suggestions
# Use meaningful variable names
# Provide context in chat queries
# Review suggestions before accepting
# Test generated code thoroughly
# Review security scan results
# Don't ignore vulnerability warnings
# Validate input in generated code
# Follow principle of least privilege
# Regularly update dependencies
# Share useful prompts with team
# Establish coding standards
# Review AI-generated code
# Document custom configurations
# Train team on effective usage
# Features included:
# - Basic code completion
# - Limited chat interactions
# - Security scanning (basic)
# - Monthly usage limits apply
# Additional features:
# - Advanced code generation
# - Unlimited chat
# - Application modernization
# - Priority support
# - Team management features
# Custom pricing for:
# - SSO integration
# - Advanced security controls
# - Audit logging
# - Custom model training
# - Dedicated support