Directory / Amazon Q Developer CLI

Amazon Q Developer CLI

Coding agent (CLI) · AWS · 3/7 verified · Last checked 2026-10-16

Per-tool trust for a session via /tools trust, which resets on restart. Shadow-git checkpoints can restore earlier states.

Overall: C (2.00 avg, 3/7 controls verified; capped from B because B needs 4 verified)

Lock this down first

Do not run /tools trustall. Trust tools one at a time.

Scorecard

Criterion	Rating	Notes
Permission granularity	2/3	Per-tool, not per-command, from the PR we read.
Human approval gates	2/3	/tools trust per tool for the session; trust resets on restart.
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	Unverified	Not confirmed in the docs we checked.
Audit logs	2/3	Local logs cover auth, network and command activity. Shadow-git checkpoints too.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Secrets handling, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

Vendor? Request a correction. We review corrections within 7 days.