AWS API Call Governance with Amazon Q Developer: Controlling AI-Powered Operations

Amazon Q Developer includes a built-in solution to address governance challenges in enterprise environments. The tool generates AWS CLI commands in response to user requests and executes them using its use_aws and execute_bash built-in tools. To distinguish AI-assisted operations from manual commands, Q Developer includes user-agent markers that automatically identify AWS CLI calls made through Q Developer in CloudTrail logs. This enables precise IAM policy controls, allowing organizations to maintain productivity benefits while governing AI-powered development.