CodeGuru Reviewer

CodeGuru Reviewer allows you to scan your source code and find vulnerabilities and performance optimization opportunities. It uses program analysis and machine learning techniques to detect any code defects and provide recommendations.

At a high level, these are the types of checks AWS CodeGuru Reviewer provides:

Figure 6.2 – CodeGuru Reviewer recommendation types

Let’s look at all of these categories one by one and understand the capabilities provided by each CodeGuru category.

Security detection

CodeGuru Reviewer performs automated reasoning analysis on code and detects security flaws between different method calls in the request chain. CodeGuru Reviewer helps to detect and fix the Open Web Application Security Project (OWASP) top 10 common code vulnerabilities.

CodeGuru helps to detect and correct the usage of Java and Python crypto libraries and ensures that correct hashing algorithms are used to protect...