Directory / Amazon Q Developer CLI
Amazon Q Developer CLI
Per-tool trust for a session via /tools trust, which resets on restart. Shadow-git checkpoints can restore earlier states.
Lock this down first
Do not run /tools trustall. Trust tools one at a time.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 2/3 | Per-tool, not per-command, from the PR we read. |
| Human approval gates | 2/3 | |
| Sandboxing | Unverified | Not confirmed in the docs we checked. |
| Secrets handling | Unverified | Not confirmed in the docs we checked. |
| Audit logs | 2/3 | Local logs cover auth, network and command activity. Shadow-git checkpoints too. |
| Kill switch / interrupt | Unverified | Not confirmed in the docs we checked. |
| Network egress control | Unverified | Not confirmed in the docs we checked. |