What are the two halves of CodeGuru and where does each add value?
Quick Answer
Reviewer analyses pull requests and posts recommendations — including security detectors for issues like hardcoded secrets and injection — as inline comments, so review feedback is automated.
Detailed Answer
Reviewer analyses pull requests and posts recommendations — including security detectors for issues like hardcoded secrets and injection — as inline comments, so review feedback is automated. Profiler runs in production, samples CPU and memory, and pinpoints the specific methods burning the most time or money, which is optimisation guidance you cannot get from static analysis. AWS is consolidating Reviewer's capabilities into Amazon Q Developer's code reviews.
Code Example
# Deep-dive: AWS CodeGuru # Reviewer for pull-request comments and security detectors vs Profiler for runtime CPU/heap hotspots, repository association, how it compares with dedicated SAST, and the migration toward Amazon Q Developer reviews # apply the reasoning in the detailed answer to your own pipeline, # and prove it with a test/dry-run before enforcing in production
Interview Tip
This is where depth shows — be concrete about AWS CodeGuru, not generic about "security".