VOOZH about

URL: https://thenewstack.io/amazon-revamps-developer-ai-with-code-conversion-security/

⇱ Amazon Revamps Developer AI With Code Conversion, Security - The New Stack


TNS
SUBSCRIBE
Join our community of software engineering leaders and aspirational developers. Always stay in-the-know by getting the most important news and exclusive content delivered fresh to your inbox to learn more about at-scale software development.
REQUIRED
It seems that you've previously unsubscribed from our newsletter in the past. Click the button below to open the re-subscribe form in a new tab. When you're done, simply close that tab and continue with this form to complete your subscription.
The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our Terms of Use and Privacy Policy.
Welcome and thank you for joining The New Stack community!
Please answer a few simple questions to help us deliver the news and resources you are interested in.
REQUIRED
REQUIRED
REQUIRED
REQUIRED
REQUIRED
Great to meet you!
Tell us a bit about your job so we can cover the topics you find most relevant.
REQUIRED
REQUIRED
REQUIRED
REQUIRED
REQUIRED
Welcome!

We’re so glad you’re here. You can expect all the best TNS content to arrive Monday through Friday to keep you on top of the news and at the top of your game.

What’s next?

Check your inbox for a confirmation email where you can adjust your preferences and even join additional groups.

Follow TNS on your favorite social media networks.

Become a TNS follower on LinkedIn.

Check out the latest featured and trending stories while you wait for your first TNS newsletter.

PREV
1 of 2
NEXT
VOXPOP
As a JavaScript developer, what non-React tools do you use most often?
Angular
0%
Astro
0%
Svelte
0%
Vue.js
0%
Other
0%
I only use React
0%
I don't use JavaScript
0%
Thanks for your opinion! Subscribe below to get the final results, published exclusively in our TNS Update newsletter:
NEW! Try Stackie AI
From clobbered drafts to real-time sync
Apr 14th 2026 10:00am, by David Moore
TypeScript 6.0 RC arrives as a bridge to a faster future
Mar 14th 2026 9:00am, by Darryl K. Taft
Mastra empowers web devs to build AI agents in TypeScript
Jan 28th 2026 11:00am, by Loraine Lawson
2024-09-27 06:00:06
Amazon Revamps Developer AI With Code Conversion, Security
AI / Java / Large Language Models / Software Development

Amazon Revamps Developer AI With Code Conversion, Security

Amazon Q Developer, a revamped AI coding assistant, helped Amazon convert 30,000 apps to Java 17 and save 4,500 years of development work.
Sep 27th, 2024 6:00am by Loraine Lawson
👁 Featued image for: Amazon Revamps Developer AI With Code Conversion, Security
Photo by Miguel Á. Padriñán via Pexels.

Amazon spent 50 developer days just to update one application from Java 8/11 to Java 17. With its recently released and revamped AI copilot, Amazon Q Developer, the e-commerce company was able to convert similar applications in hours.

A team of developers was able to convert 30,000 production applications from Java 8 or Java 11 to Java 17 using Q Developer, the company stated. It saved over 4,500 years of development work and $260 million dollars annually from performance improvements, the company added.

Amazon Q Developer is a reinvention of Code Whisperer, which was merged into Q Developer in April.

Q Developer as a Coding Partner

Rather than just performing code completion, Amazon Q Developer is designed to support the entire software development lifecycle, according to Srini Iragavarapu, Amazon’s director of generative AI applications and developer experiences.

“We don’t look at it from a coding standpoint or a development standpoint,” Iragavarapu told The New Stack. “We’re actually looking at it as a complete software development lifecycle, where the developer goes from ‘I plan my projects, I understand what needs to be done, get the requirements, I implement them, I deploy them, troubleshoot them, and then maintain them.’”

Q Developer enables writing tests, optimizing code, debugging the cloud compute and AWS resources as well, he said. It can build new application features with a descriptive, natural language prompt. Users can iterate on the plan with Amazon Q as well, reviewing the potential code suggestions and asking for improvements.

It also helps development teams “shift left” by performing a code security scan and updating developers about potential security problems, he added. Amazon Q Developer has outperformed leading publicly benchmarkable tools on detection across most of the popular programming languages, the company claimed.

Amazon wanted Q Developer to function much as another software developer who will help you as you code. For example, with an unfamiliar repo, a developer would either read the documentation or ask a senior software engineer or peer about what it does.

“One of the things that you could do is ask Q, can you explain what this particular function is doing? So it’s actually looking at the function,” he said. “It walks through line by line. It always feels like you have a developer sitting right next to you and chatting with you about all of this.”

It will also generate code recommendations, of course, and goes beyond single line completions to offer further coding recommendations.

The Amazon Gen AI Stack

In addition to Q Developer, Amazon is offering Q Business, which focuses on the business persona and internal data.

There are three layers to Amazon’s Generative AI stack. The bottom layer includes two custom-made chips, the AWS Trainium, which is fine-tuned for training models, and AWS Inferential, which is fine-tuned for inference. The bottom layer also includes Sagemaker, Amazon’s cloud-based machine learning platform. Sagemaker builds, trains and deploys the machine learning and generative AI models.

“Again, we want to make it interactive. Think of it as you’re coding with a paired programmer of sorts,”
— Srini Iragavarapu, Amazon’s director of generative AI applications and developer experiences

The middle layer is composed of tools and pre-trained foundation models to build and scale generative AI-powered applications. It’s built on Bedrock, which is Amazon’s platform for generative AI. Bedrock incorporates a variety of large language models (LLMs) of different sizes and functionalities, including Anthropic’s model, Amazon’s own models and Llama models for customers building applications, he said.

The top layer is the Amazon Q Business and Q Developer, applications with built-in generative AI that do not require any specific expertise in machine learning.

Amazon: No Training on Enterprise Data

Amazon does not store or use any customer data to improve the base service in the enterprise version, Iragavarapu said. The free tier offers developers an opt-out of any code collection.

“Unlike traditional AI services where you have to opt-out to say ‘please do not use any of my data,’ you as a customer, in this case, in the professional version, you don’t even have to opt out because we’re not storing it whatsoever,” he said. “The first decision that we made as we were embarking in this journey is we quickly realized code and anything to do with software overall is IP that every customer wants to be able to use and provide. So we said, let’s not leverage anything that the customers are providing us to the service and only respond, but not use, any of this or store any of this for improving our service.”

Understanding Other People’s Code

One pain point that Q Developer addresses is analyzing a repo to determine what the code actually does. Copilot does this as well, but unlike Copilot, Q Developer will answer questions a developer might have about the repo. For example, if the repo is using DynamoDB or something that the programmer doesn’t understand, the developer also can ask follow-up questions, such as why is this being used.

“The idea is it is a multistep reasoning system that uses a combination of large language models that we have through Bedrock and also program analysis and some of the vast experience that we have built over decades of building applications within Amazon as well,” he said.

How Q Developer Performs

Amazon used SWE-bench to evaluate its models. SWE-bench is a benchmark dataset designed to evaluate the capabilities of LLMs in solving real-world software engineering (SWE) problems. It’s a collection of GitHub issues paired with their corresponding pull requests, which provides a dataset that helps researchers determine how well LLMs can understand, analyze and generate code solutions.

👁 Screenshot shows ability to review and accept ore reject Amazon Q Developer code.

A screenshot from Amazon’s blog shows the ability to review and accept or reject Amazon Q Developer code.

On SWE-bench’s leaderboard, Amazon Q Developer rated 20.33 percent of issues resolved as of May 9, 2024 on the lite version. Since the first evaluation, Amazon has updated Q with other LLMs and taken feedback about what developers like and don’t like — both internally from its approximately 80,000 developers, as well as from external users.

Internally, AWS conducted a productivity challenge and found that developers who used Q Developer were 27% more likely to successfully complete tasks. Amazon also reported that Q Developer has the highest reported code acceptance rates in the industry for assistants that perform multi-line code suggestions, with BT Group recently reporting they accepted 37% of Q’s code suggestions and National Australia Bank reporting a 50% acceptance rate, according to a company spokesperson.

One of the pieces of feedback they received is that it was difficult to tell what the tool had updated. Now Q Developer provides a constant status in terms of what it’s actually doing, which is important since it can amend multiple files and create new files, he added.

“Again, we want to make it interactive. Think of it as you’re coding with a paired programmer of sorts,” he said. “In this case, if I accept it, it actually then takes the code in and then it starts doing it. Instead, you can also say provide feedback and regenerate.”

What Developers Need To Know

So far, Q Developer supports 15 programming languages:

  1. JavaScript
  2. TypeScript
  3. Python
  4. Java
  5. C#
  6. Go
  7. Rust
  8. PHP
  9. Ruby
  10. Kotlin
  11. C
  12. C++
  13. Shell scripting
  14. SQL
  15. ScalJavaScript

It also supports infrastructure-as-code languages and tools, including TerraForm’s HCL (HashiCorp Configuration Language) and CDK (cloud development kit).

The AI agent currently is available in a free tier, as well as  a paid, enterprise tier, which enables administrators to enable the tool for all developers within an organization and provides administrator controls in terms of what code is accessible.

“Some of my friends keep asking me, ‘But wait, there needs to be a catch. Is it a freemium? Are you trying to get something out of it?’ Absolutely nothing, really. It is free. Anybody can use it, install it,” Iragavarapu said. “The idea there was we wanted to enable developers to be able to build applications, use generative AI and come up with creative problem-solved solutions for customers.”

To get started, developers need to have an AWS Builder ID or be part of an organization with an AWS IAM Identity Center instance set up that allows them to use Amazon Q. To use Amazon Q Developer agent in an IDE, start by installing the Amazon Q extension, which is available for JetBrains, Visual Studio Code, Visual Studio (in preview), and in the Command Line on macOS.

Editor’s Note: Corrected to read in hours in the lede and clarify it was a team of developers of an unspecified number.

TRENDING STORIES
Loraine Lawson is a veteran technology reporter who has covered technology issues from data integration to security for 25 years. Before joining The New Stack, she served as the editor of the banking technology site Bank Automation News. She has...
Read more from Loraine Lawson
SHARE THIS STORY
TRENDING STORIES
TNS owner Insight Partners is an investor in: Anthropic.
SHARE THIS STORY
TRENDING STORIES
TNS DAILY NEWSLETTER Receive a free roundup of the most recent TNS articles in your inbox each day.
The New Stack does not sell your information or share it with unaffiliated third parties. By continuing, you agree to our Terms of Use and Privacy Policy.