Code Review
3 items across 1 section
We Tried to Trick the Agent
Part 13 of 16 in the AWS Security Agent: From Zero to Hero series. Adversarial evasion experiments against AWS Security Agent: code obfuscation, prompt injection in design documents and pull requests, fake sanitizers, and misleading comments. Almost every obfuscated vulnerability was still detected (18 of 19), and every injection attempt in these runs was ignored.
Custom Security Requirements
Part 6 of 16 in the AWS Security Agent: From Zero to Hero series. How I wrote one custom security requirement, an IDOR authorization check, and turned a 9/10 code review detection rate into 10/10. The five-field form, character limits, and the worked example, all from a controlled experiment.
Code Reviews and GitHub
Part 5 of 16 in the AWS Security Agent: From Zero to Hero series. Connecting GitHub to AWS Security Agent, the analysis-type trap that produces silent reviews, what the agent caught in a deliberately vulnerable Flask app (9 of 10), and the new full-repository review that entered preview on May 12, 2026.
Need Help with AWS Security?
Our AWS security experts can help you implement best practices across all these topics.
Contact Us