Amazon CodeGuru
ML-powered developer tools: CodeGuru Reviewer for code reviews and secrets detection (closed to new repository associations since November 7, 2025) and CodeGuru Profiler for finding expensive code at run time, with the alternatives AWS suggests for securing ML pipelines.
2 min read · Last reviewed · MLA-C02
Sign in to bookmark tutorials and track what you have read.
On this page
Already know this topic?
Try the Amazon CodeGuru quiz: 5 questions on Amazon CodeGuru.
What it is
Amazon CodeGuru is a family of ML (Machine learning)Software that learns patterns from example data to make predictions or decisions, instead of following rules written by hand. A model is first trained on data, then used to make predictions on new data, which is called inference.Glossary entry-powered developer tools that find problems in code:
- CodeGuru Reviewer analyzes Java and Python repositories with program analysis and machine learning, and comments on pull requests with suggestions on defects, resource leaks, security issues, and hard-coded secrets.
- CodeGuru Profiler collects runtime data from live applications on JVM languages and Python and shows the most expensive lines of code, CPU bottlenecks, and LatencyThe time between sending a request and receiving the response, usually measured in milliseconds. Distance and processing add to it; caching and serving users from nearby locations reduce it.Glossary entry problems, with recommendations.
Availability: since November 7, 2025, you can't create new repository associations in CodeGuru Reviewer; AWS documents other services with similar capabilities. Exam questions may still name CodeGuru for checking code in CI/CD (Continuous integration and continuous delivery)Practices in which every code change is built and tested automatically (continuous integration) and kept ready to release, often deploying it automatically through a pipeline (continuous delivery or deployment).Glossary entry pipelines (MLA-C02 task 4.3.1), but new designs should use the alternatives below.
Concepts and features
- Reviewer: repository associations (CodeCommit, GitHub, Bitbucket, and others), incremental reviews on pull requests, full repository scans, a detector library, and secrets detection that suggests moving secrets to AWS Secrets Manager.
- Profiler: an agent in the application (on EC2, containers, or Lambda) sends profiles; flame graphs show where CPU time goes; anomaly and recommendation reports point to costly code paths.
Securing ML code and containers today
| Check | Service |
|---|---|
| Vulnerabilities in container images in ECR, Lambda functions, and EC2 | Amazon Inspector (including scans in CI/CD) |
| Approved, versioned dependencies | AWS CodeArtifact |
| Secrets kept out of code | AWS Secrets Manager |
| Code quality and tests in the pipeline | AWS CodeBuild with test reports, in AWS CodePipeline |
Security, resilience, performance, and cost
Security
IAM controls access; code analyzed by Reviewer and profiling data are encrypted; repository access uses connections rather than stored credentials.
Resilience
Managed services; Profiler's agent sends data asynchronously so it doesn't affect the application's availability.
Performance
Profiler's sampling has a low overhead and points to where optimization pays most, which also cuts compute cost.
Cost
Reviewer was priced by the lines of code analyzed; Profiler by sampling hours of the profiled application.
Monitoring
Recommendations appear in the console and in pull requests; Profiler reports anomalies; CloudTrail records API (Application programming interface)A defined way for one program to ask another for data or actions, such as a set of HTTPS requests and responses. Every AWS service is controlled through its API, which the console, the CLI, and the SDKs call for you.Glossary entry calls.
Reverse mindmap: when the question points here
- CodeGuru
- Automated review comments on pull requests leads to CodeGuru Reviewer (no new associations since 2025-11-07)
- Find the most CPU-expensive code at run time leads to CodeGuru Profiler
- Alternatives for new pipelines
- Scan container images for CVEs leads to Amazon Inspector
- Keep secrets out of code leads to Secrets Manager
Key takeaways
- CodeGuru Reviewer reviews Java and Python code and finds secrets; since November 7, 2025, no new repository associations can be created.
- CodeGuru Profiler finds expensive code and CPU bottlenecks in running JVM and Python applications.
- To secure ML CI/CD pipelines in new designs, scan images and code with Amazon Inspector, control dependencies with CodeArtifact, and store secrets in Secrets Manager.