From the course: Introduction to AWS AI Services for Developers

Unlock the full course today

Join today to access over 25,000 courses taught by industry experts.

CodeGuru Detector Library

CodeGuru Detector Library

The CodeGuru detector library contains the vulnerabilities and the rules that CodeGuru is using to scan your code. On the left hand side of the page, you can see all the detectors that are currently programmed for Python, and Amazon is adding more and more to make CodeGuru even better. You can click on the links to learn more about the vulnerabilities as they were originally published. You can use the breadcrumbs at the top to click on Python. This will give you a short description of each detector. Click "Browse by severity" and then click on "Critical Severity." Click on "Hardcoded credentials". In the example code shown below, you'll see that CodeGuru is scanning your code for anywhere that you might have copy pasted your AWS secret access keys directly into your source code. This continues to be a common source of security breaches today, because the developer can mistakenly use their access credentials directly within their source code, and then that source code either becomes…

Contents