Pattern Findings

The scanner identified 329 distinct pattern matches across 21 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.

Self-Referential Comments59 hits · 207 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	…rtfolio_with_ec2_product/portfolio_with_ec2_product.py	63	# Create a portfolio	COMMENT
MEDIUM⚡	…rtfolio_with_ec2_product/portfolio_with_ec2_product.py	69	# Create an EC2 product from a Product Stack	COMMENT
MEDIUM	python/application-load-balancer/app.py	16	# Create a VPC for our infrastructure	COMMENT
MEDIUM	python/application-load-balancer/app.py	24	# Create an Auto Scaling Group with EC2 instances	COMMENT
MEDIUM	python/application-load-balancer/app.py	36	# Create an Application Load Balancer	COMMENT
MEDIUM	…eline-smoke-test/pipeline_smoke_test/pipeline_stack.py	14	# Create a connection with:	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-placement/app.py	11	# Create a cluster	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-placement/app.py	33	# Create a task definition with placement constraints	COMMENT
MEDIUM	python/ecs/fargate-service-with-autoscaling/app.py	15	# Create a cluster	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-networking/app.py	13	# Create a cluster	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-networking/app.py	35	# Create a task definition with its own elastic network interface	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-networking/app.py	54	# Create a security group that allows HTTP traffic on port 80 for our	COMMENT
MEDIUM	python/ecs/ecs-service-with-task-networking/app.py	66	# Create the service	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	33	# Create an Amazon Elastic File System (EFS), with the logical ID CDK-efs-sample-EFS	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	41	# Create an Access Point for the EFS, with the logical ID CDK-efs-sample-AccessPoint	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	47	# Create a new EFS volume configuration for the ECS Task	COMMENT
MEDIUM	python/ecs/fargate-service-with-efs/app.py	60	# Create a new IAM Role for the ECS Task	COMMENT
MEDIUM	python/ecs/fargate-service-with-efs/app.py	100	# Create a new Fargate Task Definition	COMMENT
MEDIUM	python/ecs/fargate-service-with-efs/app.py	143	# Create a new Fargate Service with ALB	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	165	# Create a new Auto Scaling Policy for the ECS Service	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	171	# Create a new Auto Scaling Policy for the ECS Service	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	176	# Create a new Auto Scaling Policy for the ECS Service	COMMENT
MEDIUM⚡	python/ecs/fargate-service-with-efs/app.py	181	# Create the new CDK Application	COMMENT
MEDIUM	…hon/iot-msk-lambda-pipeline/msk_demo/msk_demo_stack.py	235	# Create the Iot Messaging destination and rule	COMMENT
MEDIUM	…es-lambda/api_stages_lambda/api_stages_lambda_stack.py	23	# Define the REST API	COMMENT
MEDIUM⚡	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	16	#Create the SQS queue	COMMENT
MEDIUM⚡	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	19	#Create the API GW service role with permissions to call SQS	COMMENT
MEDIUM⚡	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	27	#Create an API GW Rest API	COMMENT
MEDIUM⚡	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	31	#Create a resource named "example" on the base API	COMMENT
MEDIUM	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	59	#Create a Method Response Object: https://docs.aws.amazon.com/cdk/api/latest/python/aws_cdk.aws_apigateway/Metho	COMMENT
MEDIUM	…/api-sqs-lambda/api_sqs_lambda/api_sqs_lambda_stack.py	76	#Create an SQS event source for Lambda	COMMENT
MEDIUM	python/eventbridge-mesh/single-consumer/app.py	18	# Create the EventBus	COMMENT
MEDIUM	python/eventbridge-mesh/multiple-consumers/app.py	18	# Create the EventBus	COMMENT
MEDIUM	…ambda/api_eventbridge_lambda/api_eventbridge_lambda.py	70	# Create a Role for KinesisFirehose	COMMENT
MEDIUM	…cks/apigw_http_api_lambda_dynamodb_python_cdk_stack.py	70	# Create the Lambda function to receive the request	COMMENT
MEDIUM	…azon-verified-permissions-rest-api/stack/apigw/main.py	18	# Create the REST API	COMMENT
MEDIUM	…search_simple_domain/opensearch_simple_domain_stack.py	31	# Create an environment variable before running cdk deploy. E.g.:	COMMENT
MEDIUM⚡	python/ecs-serviceconnect/ecs/ecs_stack.py	22	# Creating the ECS Cluster and the cloud map namespace	COMMENT
MEDIUM⚡	python/ecs-serviceconnect/ecs/ecs_stack.py	28	# Creating the Cloudwatch log group where ECS Logs will be stored	COMMENT
MEDIUM⚡	python/ecs-serviceconnect/ecs/ecs_stack.py	34	# Creating the task and execution IAM roles that the containers will assume to read and write to cloudwatch, Tas	COMMENT
MEDIUM	python/ecs-serviceconnect/ecs/ecs_stack.py	99	# Creating the service definitions and port mappings	COMMENT
MEDIUM	python/ecs-serviceconnect/ecs/ecs_stack.py	130	# Creating a public load balancer that will listen on port 80 and forward requests to the frontend ecs container	COMMENT
MEDIUM	…_service_connect/cdk_examples_service_connect_stack.py	12	# Creating a shared VPC with public subnets and private subnets with NAT Gateways	COMMENT
MEDIUM	python/iotcore/cdk_iot_thing/cdk_iot_thing_stack.py	29	# Create an IoT Thing	COMMENT
MEDIUM	python/iotcore/cdk_iot_thing/cdk_iot_thing_stack.py	76	# Create a policy of the certificate	COMMENT
MEDIUM	python/iotcore/cdk_iot_thing/cdk_iot_thing_stack.py	121	# Create an IAM role for logging the IoT rule event	COMMENT
MEDIUM	python/url-shortener/lambda/handler.py	39	# Create a unique id (take first 8 chars)	COMMENT
MEDIUM	python/url-shortener/lambda/handler.py	50	# Create the redirect URL	COMMENT
MEDIUM	…tasync-s3/datasync_s3_to_s3/datasync_s3_to_s3_stack.py	45	# Create the locations	COMMENT
MEDIUM	…tasync-s3/datasync_s3_to_s3/datasync_s3_to_s3_stack.py	90	# Create the locations	COMMENT
MEDIUM⚡	…nc-s3/datasync_s3_to_s3/datasync_s3_to_s3_IAM_stack.py	13	# Create a list of bucket paths ending in /* for IAM policy	COMMENT
MEDIUM⚡	…nc-s3/datasync_s3_to_s3/datasync_s3_to_s3_IAM_stack.py	19	# Create an IAM Role for DataSync to read and write to S3 bucket	COMMENT
MEDIUM⚡	…nc-s3/datasync_s3_to_s3/datasync_s3_to_s3_IAM_stack.py	20	# Create an IAM role	COMMENT
MEDIUM	…ine-glue-deploy/lambda_etl_launch/lambda_etl_launch.py	71	# Create the Glue job	COMMENT
MEDIUM⚡	scripts/build-all-typescript.sh	25	# Create a temporary directory for build logs	COMMENT
MEDIUM	scripts/build-all-typescript.sh	70	# Create a modified version of the build script that suppresses cdk synth output	COMMENT
MEDIUM	.github/workflows/build-pull-request.yml	20	# Define a matrix strategy to run the job for multiple languages	COMMENT
MEDIUM	.github/workflows/build-pull-request.yml	49	# Create a temporary directory for build logs	COMMENT
MEDIUM	.github/workflows/build-pull-request.yml	102	# Create an array to store directories to be built	COMMENT

Unused Imports103 hits · 103 pts

Severity	File	Line	Context
LOW	…rtfolio_with_ec2_product/portfolio_with_ec2_product.py	1	CODE
LOW	python/rekognition-video-processor/app.py	2	CODE
LOW	python/application-load-balancer/app.py	2	CODE
LOW	python/application-load-balancer/app.py	3	CODE
LOW	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	6	CODE
LOW	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	21	CODE
LOW	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	22	CODE
LOW	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	24	CODE
LOW	python/opensearch/ctcwl-oss/app.py	2	CODE
LOW	…thon/opensearch/ctcwl-oss/ctcwl_oss/ctcwl_oss_stack.py	6	CODE
LOW	…thon/opensearch/ctcwl-oss/ctcwl_oss/ctcwl_oss_stack.py	7	CODE
LOW	…thon/opensearch/ctcwl-oss/ctcwl_oss/ctcwl_oss_stack.py	20	CODE
LOW	…thon/opensearch/ctcwl-oss/ctcwl_oss/ctcwl_oss_stack.py	21	CODE
LOW	python/backup-s3/app.py	2	CODE
LOW	python/codepipeline-build-deploy-github-manual/app.py	2	CODE
LOW	…peline_build_deploy/codepipeline_build_deploy_stack.py	1	CODE
LOW	python/ecs/fargate-load-balanced-service/app.py	1	CODE
LOW	python/ecs/fargate-service-with-efs/app.py	12	CODE
LOW	…hon/iot-msk-lambda-pipeline/msk_demo/msk_demo_stack.py	2	CODE
LOW	…hon/iot-msk-lambda-pipeline/msk_demo/msk_demo_stack.py	13	CODE
LOW	python/api-stages-lambda/app.py	2	CODE
LOW	python/api-stages-lambda/tests/conftest.py	1	CODE
LOW	python/api-stages-lambda/tests/api_driver.py	3	CODE
LOW	python/serverless-backend/app.py	2	CODE
LOW	…dge-ecs/s3_eventbridge_ecs/s3_eventbridge_ecs_stack.py	1	CODE
LOW	…/ssh-into-emr-cluster/emr_pattern/emr_pattern_stack.py	11	CODE
LOW	python/lambda-cron/test_lambda-cron.py	1	CODE
LOW	python/lambda-cron/test_lambda-cron.py	3	CODE
LOW	…hedulescaling/schedulescaling/schedulescaling_stack.py	1	CODE
LOW	…hedulescaling/schedulescaling/schedulescaling_stack.py	5	CODE
LOW	…hedulescaling/schedulescaling/schedulescaling_stack.py	6	CODE
LOW	…hedulescaling/schedulescaling/schedulescaling_stack.py	7	CODE
LOW	python/image-content-search/stack/cdk.py	4	CODE
LOW	python/image-content-search/stack/cdk.py	4	CODE
LOW	…maker-multimodel-endpoint/docker/dockerd-entrypoint.py	1	CODE
LOW	…/ec2-cloudwatch/ec2_cloudwatch/ec2_cloudwatch_stack.py	2	CODE
LOW	…cks/apigw_http_api_lambda_dynamodb_python_cdk_stack.py	4	CODE
LOW	…ources/raw-strings/raw_strings/infrastructure_stack.py	1	CODE
LOW	…ssions-rest-api/stack/verified_permissions/__init__.py	1	CODE
LOW	…rest-api/stack/verified_permissions/policy/__init__.py	1	CODE
LOW	…rest-api/stack/verified_permissions/policy/__init__.py	2	CODE
LOW	python/opensearch-simple-domain/app.py	2	CODE
LOW	…search_simple_domain/opensearch_simple_domain_stack.py	11	CODE
LOW	python/ec2-alarms-to-opsitem/app.py	2	CODE
LOW	…m/ec2_alarms_to_opsitem/ec2_alarms_to_opsitem_stack.py	3	CODE
LOW	python/ec2-alarms-to-opsitem/lambda/opsitem.py	1	CODE
LOW	python/ec2-alarms-to-opsitem/lambda/alarm.py	1	CODE
LOW	python/ec2-alarms-to-opsitem/lambda/alarm.py	3	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
LOW	python/rds/oracle/oracle.py	2	CODE
43 more matches not shown…

Structural Annotation Overuse22 hits · 46 pts

Severity	File	Line	Snippet	Context
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	11	// Step 1: Create the replication role in the source account	COMMENT
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	19	// Step 2: Create destination KMS Key & S3 Bucket to replication to and allow the replication role in the source account	COMMENT
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	27	// Step 3: Create source KMS Key & S3 Bucket to replicate from and allow the replication role to access it and replicate	COMMENT
LOW	typescript/batch-ecr-openmp/README.md	201	### Step 1: Cancel Running Jobs	COMMENT
LOW	typescript/batch-ecr-openmp/README.md	227	### Step 2: Destroy the Stack	COMMENT
LOW	typescript/batch-ecr-openmp/README.md	241	### Step 3: Clean Up Local Artifacts (Optional)	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	21	# Step 1: Build the OpenMP application locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	30	# Step 2: Run Unit Tests	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	38	# Step 3: Test the application locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	67	# Step 4: Build Docker image locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	76	# Step 5: Test Docker container	COMMENT
LOW	typescript/batch-ecr-openmp/scripts/test-local.sh	90	# Step 6: CDK Unit Tests	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	42	# Step 1: Build the CDK stack	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	50	# Step 2: Deploy CDK stack	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	58	# Step 3: Get ECR login token and login	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	66	# Step 4: Build Docker image	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	74	# Step 5: Tag and push Docker image	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	83	# Step 6: Get stack outputs	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	87	# Step 7: Save deployment info for automated job submission	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	80	//Step 1: Confirm the structure of the JWT	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	84	//Step 2: Validate the JWT signature	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	89	//Step 3: Verify the claims	COMMENT

Over-Commented Block45 hits · 45 pts

Severity	File	Line	Snippet	Context
LOW	go/static-site/static-site.go	181	// If unspecified, this stack will be "environment-agnostic".	COMMENT
LOW	go/ec2-instance/ec2-instance.go	101	// Account/Region-dependent features and context lookups will not work, but a	COMMENT
LOW	go/ec2-instance/configure.sh	1	#!/bin/sh	COMMENT
LOW	go/classic-load-balancer/classic-load-balancer.go	61	}	COMMENT
LOW	go/classic-load-balancer/classic-load-balancer.go	81	// implied by the current CLI configuration. This is recommended for dev	COMMENT
LOW	go/ecs/fargate-alb-pattern/fargate-alb-pattern.go	61	// Account/Region-dependent features and context lookups will not work, but a	COMMENT
LOW	go/ecs/fargate-with-alb/fargate-with-alb.go	101	// Uncomment if you know exactly what account and region you want to deploy	COMMENT
LOW	go/ecs/cluster/cluster.go	61	// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html	COMMENT
LOW	go/ecs/cluster/cluster.go	81	// return &awscdk.Environment{	COMMENT
LOW	go/ecs/cluster-alb/cluster-alb.go	121	app.Synth(nil)	COMMENT
LOW	go/ecs/cluster-alb/cluster-alb.go	141	// Uncomment to specialize this stack for the AWS Account and Region that are	COMMENT
LOW	go/step-functions/step-function.go	101	// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html	COMMENT
LOW	go/step-functions/step-function.go	121	// return &awscdk.Environment{	COMMENT
LOW	go/lambda-container-s3-trigger/lambda.go	81	// be deployed. For more information see: https://docs.aws.amazon.com/cdk/latest/guide/environments.html	COMMENT
LOW	go/lambda-container-s3-trigger/lambda.go	101	// return &awscdk.Environment{	COMMENT
LOW	go/eks/cluster/cluster.go	101		COMMENT
LOW	go/eks/cluster-graviton/cluster.go	101	// Uncomment if you know exactly what account and region you want to deploy	COMMENT
LOW	go/s3-event-processor/s3-event-processor.go	121	// return &awscdk.Environment{	COMMENT
LOW	go/lambda-cron/lambda-cron.go	61	//---------------------------------------------------------------------------	COMMENT
LOW	…codepipeline-build-deploy/codepipeline-build-deploy.go	321	// the stack to. This is the recommendation for production stacks.	COMMENT
LOW	go/cognito-httpapi/README.md	21		COMMENT
LOW	go/sagemaker/endpoint-jumpstart/endpoint-jumpstart.go	201	// env determines the AWS environment (account+region) in which our stack is to	COMMENT
LOW	go/sagemaker/endpoint-jumpstart/endpoint-jumpstart.go	221	// Uncomment to specialize this stack for the AWS Account and Region that are	COMMENT
LOW	go/sagemaker/notebook/notebook.go	101	// Uncomment if you know exactly what account and region you want to deploy	COMMENT
LOW	…hon/route53-failover/alias_healthcheck_record_stack.py	41	# healthCheckMetric = cloudwatch.Metric(	COMMENT
LOW	python/waf/waf_cloudfront.py	141	"priority" : 60,	COMMENT
LOW	python/waf/waf_regional.py	141	"override_action" : "none",	COMMENT
LOW	…hon/new-vpc-alb-asg-mysql/cdk_vpc_ec2/cdk_rds_stack.py	21	# instance_type=ec2.InstanceType(instance_type_identifier="t2.small"	COMMENT
LOW	…search_simple_domain/opensearch_simple_domain_stack.py	21		COMMENT
LOW	python/rds/oracle/requirements.txt	1	##	COMMENT
LOW	python/rds/oracle/oracle.py	41	## ec2.Peer.ipv4("0.0.0.0/0")	COMMENT
LOW	python/rds/aurora/requirements.txt	1	##	COMMENT
LOW	python/rds/aurora/aurora.py	61	##	COMMENT
LOW	python/rds/mysql/requirements.txt	1	##	COMMENT
LOW	python/datasync-s3/tests/unit/test_datasync_s3_stack.py	1	import aws_cdk as core	COMMENT
LOW	python/ec2/instance/configure.sh	1	#!/bin/sh	COMMENT
LOW	typescript/my-widget-service/widget_service.ts	1	// snippet-comment:[These are tags for the AWS doc team's sample catalog. Do not remove.]	COMMENT
LOW	typescript/my-widget-service/resources/widgets.js	1	//snippet-comment:[These are tags for the AWS doc team's sample catalog. Do not remove.]	COMMENT
LOW	…rverless/lib/neptune-to-opensearch-serverless-stack.ts	81	// Required for OpenSearch Serverless. Neptune rejects the pairing when	COMMENT
LOW	…rverless/lib/neptune-to-opensearch-serverless-stack.ts	301	// costs latency, not throughput.	COMMENT
LOW	typescript/postgres-lambda/test/postgres-lambda.test.ts	1	// import * as cdk from 'aws-cdk-lib';	COMMENT
LOW	typescript/r53-resolver/test/r53-resolver.test.ts	1	// import * as cdk from 'aws-cdk-lib';	COMMENT
LOW	typescript/lexbot/test/lexbot.test.ts	1	// import * as cdk from 'aws-cdk-lib';	COMMENT
LOW	.github/workflows/close-stale-issues.yml	41	# If you don't want to mark a issue as being ancient based on a	COMMENT
LOW	csharp/static-site/src/StaticSite/StaticSiteStack.cs	1	using Amazon.CDK;	COMMENT

Verbosity Indicators19 hits · 42 pts

Severity	File	Line	Snippet	Context
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	11	// Step 1: Create the replication role in the source account	COMMENT
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	19	// Step 2: Create destination KMS Key & S3 Bucket to replication to and allow the replication role in the source account	COMMENT
LOW⚡	typescript/s3-kms-cross-account-replication/app.ts	27	// Step 3: Create source KMS Key & S3 Bucket to replicate from and allow the replication role to access it and replicate	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	21	# Step 1: Build the OpenMP application locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	30	# Step 2: Run Unit Tests	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	38	# Step 3: Test the application locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	67	# Step 4: Build Docker image locally	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	76	# Step 5: Test Docker container	COMMENT
LOW	typescript/batch-ecr-openmp/scripts/test-local.sh	90	# Step 6: CDK Unit Tests	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	42	# Step 1: Build the CDK stack	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	50	# Step 2: Deploy CDK stack	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	58	# Step 3: Get ECR login token and login	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	66	# Step 4: Build Docker image	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	74	# Step 5: Tag and push Docker image	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	83	# Step 6: Get stack outputs	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	87	# Step 7: Save deployment info for automated job submission	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	80	//Step 1: Confirm the structure of the JWT	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	84	//Step 2: Validate the JWT signature	COMMENT
LOW⚡	…to-lambda-dynamodb/src/Lambda/AuthFunction/Function.cs	89	//Step 3: Verify the claims	COMMENT

Cross-File Repetition5 hits · 25 pts

Severity	File	Snippet	Context
HIGH	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	copyright amazon.com, inc. or its affiliates. all rights reserved. spdx-license-identifier: mit-0	STRING
HIGH	python/opensearch/ctcwl-oss/app.py	copyright amazon.com, inc. or its affiliates. all rights reserved. spdx-license-identifier: mit-0	STRING
HIGH	…thon/opensearch/ctcwl-oss/ctcwl_oss/ctcwl_oss_stack.py	copyright amazon.com, inc. or its affiliates. all rights reserved. spdx-license-identifier: mit-0	STRING
HIGH	python/opensearch/ctcwl-oss/lambda/index.py	copyright amazon.com, inc. or its affiliates. all rights reserved. spdx-license-identifier: mit-0	STRING
HIGH	python/apigw-http-api-lambda-dynamodb-python-cdk/app.py	copyright amazon.com, inc. or its affiliates. all rights reserved. spdx-license-identifier: mit-0	STRING

Hyper-Verbose Identifiers22 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	…a-s3-glue/tests/unit/test_demo_athena_s3_glue_stack.py	48	def test_glue_database_created(template):	CODE
LOW	…a-s3-glue/tests/unit/test_demo_athena_s3_glue_stack.py	62	def test_glue_crawler_created(template):	CODE
LOW	…a-s3-glue/tests/unit/test_demo_athena_s3_glue_stack.py	118	def test_athena_workgroup_created(template):	CODE
LOW	…a-s3-glue/tests/unit/test_demo_athena_s3_glue_stack.py	143	def test_athena_queries_created(template):	CODE
LOW	…db-zero-etl/ddb_zero_etl/ddb_to_aoss_zero_etl_stack.py	215	def collection_pipeline_policy_doc(self, collection_arn):	CODE
LOW	…db-zero-etl/ddb_zero_etl/ddb_to_aoss_zero_etl_stack.py	282	def get_pipeline_configuration(self, table_arn, role_arn, collection_endpoint):	CODE
LOW	…thon/ddb/global-table-with-cmk/lib/stacks/cmk_stack.py	55	def _create_cfn_output_key_arn(self, key_region: str, key_id: str):	CODE
LOW	…thon/ddb/global-table-with-cmk/lib/stacks/cmk_stack.py	90	def get_key_replica_export_names(self, region: str):	CODE
LOW	…ual/tests/unit/test_codepipeline_build_deploy_stack.py	7	def test_deployment_controller_set():	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	34	def test_api_method_requires_iam_auth(service_template):	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	50	def test_smoke_test_role_is_created_under_the_expected_path(service_template):	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	60	def test_smoke_test_role_can_only_invoke_the_api(service_template):	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	77	def test_stack_exports_the_values_the_smoke_test_needs(service_template):	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	84	def test_smoke_test_runs_after_the_deployment(pipeline_template):	CODE
LOW	…moke-test/tests/unit/test_pipeline_smoke_test_stack.py	114	def test_smoke_test_step_may_only_assume_smoke_test_roles(pipeline_template):	CODE
LOW	python/lambda-cron/test_lambda-cron.py	12	def test_specified_resources_created(self):	CODE
LOW	python/lambda-cron/test_lambda-cron.py	16	def test_lambda_function_has_correct_properties(self):	CODE
LOW	python/lambda-cron/test_lambda-cron.py	32	def test_lambda_has_correct_iam_permissions(self):	CODE
LOW	python/lambda-cron/test_lambda-cron.py	53	def test_lambda_not_running_in_vpc(self):	CODE
LOW	python/lambda-cron/test_lambda-cron.py	59	def test_event_has_correct_rule(self):	CODE
LOW	…loy/tests/unit/test_codepipeline_build_deploy_stack.py	7	def test_deployment_controller_set():	CODE
LOW	scripts/update-cdk-dependencies/src/languages/python.ts	16	export function updateRequirementsContent(content: string, targets: TargetVersions): ReplacementResult {	CODE

Excessive Try-Catch Wrapping18 hits · 22 pts

Severity	File	Line	Snippet	Context
LOW	…gnition-video-processor/lambdas/process_video/index.py	30	except Exception as e:	CODE
MEDIUM	…gnition-video-processor/lambdas/process_video/index.py	31	print(f"Error processing celebrity recognition results: {str(e)}")	CODE
LOW	python/opensearch/ctcwl-oss/lambda/index.py	58	except Exception as e:	CODE
MEDIUM	python/opensearch/ctcwl-oss/lambda/index.py	20	def handler(event, context):	CODE
LOW	…image-content-search/src/imageData/helper/migration.py	20	except Exception as e:	STRING
LOW	…er/rekognition_lambda_s3_trigger/lambda/rekfunction.py	53	except Exception as e:	CODE
MEDIUM	…er/rekognition_lambda_s3_trigger/lambda/rekfunction.py	55	print("Error processing object {} from bucket {}. ".format(key, bucket_name))	CODE
LOW	…ine-glue-deploy/lambda_etl_launch/lambda_etl_launch.py	95	except Exception as e:	CODE
LOW	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	66	except Exception as e:	CODE
LOW	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	215	except Exception as e:	CODE
LOW	typescript/custom-resource/custom-resource-handler.py	22	except Exception as e:	CODE
LOW	typescript/secrets-manager-rotation/lambda/index.py	141	except Exception as e:	CODE
LOW	typescript/secrets-manager-rotation/lambda/index.py	190	except Exception as e:	CODE
LOW	typescript/secrets-manager-rotation/lambda/index.py	248	except Exception as e:	CODE
LOW	…tch-ecr-openmp/lib/aws-batch-openmp-benchmark-stack.ts	269	except Exception as e:	CODE
MEDIUM	…tch-ecr-openmp/lib/aws-batch-openmp-benchmark-stack.ts	204	def handler(event, context):	CODE
LOW	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	56	except Exception as e:	CODE
LOW	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	201	except Exception as e:	CODE

Hallucination Indicators2 hits · 20 pts

Severity	File	Line	Snippet	Context
CRITICAL	…infra/src/main/java/com/myorg/S3ObjectLambdaStack.java	106	software.amazon.awscdk.services.s3.CfnAccessPoint.Builder.create(this, "S3ObjectLambdaS3AccessPoint")	CODE
CRITICAL	…beanstalkBgPipeline/ElasticbeanstalkBgPipelineStack.cs	31	Code = Amazon.CDK.AWS.Lambda.Code.FromAsset("resources"),	CODE

Redundant / Tautological Comments9 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW	python/opensearch/os-vpc-provision/bootstrap.sh	13	# Set region to deploy the stack	COMMENT
LOW	typescript/custom-resource/custom-resource-handler.py	11	# Check if this is a Create and we're failing Creates	COMMENT
LOW	typescript/batch-ecr-openmp/scripts/submit-job.sh	131	# Check if deployment-info.json exists	COMMENT
LOW⚡	typescript/batch-ecr-openmp/scripts/test-local.sh	15	# Check if Docker is running	COMMENT
LOW	typescript/batch-ecr-openmp/scripts/build-and-deploy.sh	24	# Check if AWS CLI is configured with the profile	COMMENT
LOW	scripts/build-typescript.sh	20	# Check if yarn.lock exists	COMMENT
LOW	scripts/build-typescript.sh	26	# Check if package-lock.json exists	COMMENT
LOW⚡	scripts/build-all-typescript.sh	13	# Check if parallel is installed	COMMENT
LOW⚡	scripts/build-all-typescript.sh	19	# Check if the build script exists	COMMENT

Cross-Language Confusion2 hits · 12 pts

Severity	File	Line	Snippet	Context
HIGH⚡	…rtfolio_with_ec2_product/portfolio_with_ec2_product.py	56	CfnOutput(self, "Download Key Command", value="aws secretsmanager get-secret-value --secret-id ec2-ssh-key/cdk-k	CODE
HIGH	…nc-graphql-dynamodb/app_sync_cdk/app_sync_cdk_stack.py	140	"nextToken": $util.toJson($util.defaultIfNullOrEmpty($ctx.args.nextToken, null))	CODE

Docstring Block Structure2 hits · 10 pts

Severity	File	Line	Snippet	Context
HIGH	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	49	Decodes the JSON user parameters and validates the required properties. Args: job_data: The job data struct	STRING
HIGH	…k/elasticbeanstalk-bg-pipeline/resources/blue_green.py	43	Decodes the JSON user parameters and validates the required properties. Args: job_data: The job data structu	STRING

Slop Phrases3 hits · 6 pts

Severity	File	Line	Snippet	Context
MEDIUM	python/rekognition-video-processor/setup.py	12	description="A CDK Python app for demonstration purposes",	CODE
LOW	…/athena-s3-glue/athena_s3_glue/athena_s3_glue_stack.py	59	# creating the Glue Crawler that will automatically populate our Data Catalog. Don't forget to run the crawler	COMMENT
MEDIUM	python/rekognition-lambda-s3-trigger/setup.py	12	description="A CDK Python app for demonstration purposes",	CODE

Modern Structural Boilerplate5 hits · 5 pts

Severity	File	Line	Snippet	Context
LOW	…ventbridge-in-organization/lambda/producer/producer.py	8	logger = logging.getLogger(__name__)	CODE
LOW	…ventbridge-in-organization/lambda/consumer/consumer.py	6	logger = logging.getLogger(__name__)	CODE
LOW	…ssions-rest-api/stack/verified_permissions/__init__.py	3	__all__ = ["VerifiedPermissionsNested"]	CODE
LOW	…rest-api/stack/verified_permissions/policy/__init__.py	4	__all__ = ["create_admin_policy", "create_user_policy"]	CODE
LOW	python/url-shortener/waltersco_common/__init__.py	62	__all__ = ["WaltersCoStack"]	CODE

Empty Error Handlers1 hit · 5 pts

Severity	File	Line	Snippet	Context
HIGH	python/iotcore/lambda/cert_handler.py	41	except ClientError:	CODE

Deep Nesting3 hits · 3 pts

Severity	File	Line	Context
LOW	…gnition-video-processor/lambdas/process_video/index.py	8	CODE
LOW	python/image-content-search/src/imageData/main.py	12	CODE
LOW	typescript/secrets-manager-rotation/lambda/index.py	15	CODE

AI Structural Patterns3 hits · 3 pts

Severity	File	Line	Context
LOW	…/image-content-search/src/imageData/helper/__init__.py	32	CODE
LOW	…/image-content-search/src/imageData/helper/__init__.py	42	CODE
LOW	python/rds/aurora/aurora.py	30	CODE

Modern AI Meta-Vocabulary1 hit · 3 pts

Severity	File	Line	Snippet	Context
MEDIUM	typescript/s3-vectors-lambda-bedrock/README.md	1	# S3 Vectors RAG Pipeline with Lambda and Amazon Bedrock	COMMENT

Fake / Example Data2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	python/opensearch/os-vpc-provision/bootstrap.sh	21	email_default="user@example.com"	CODE
LOW	…c-provision/os_vpc_provision/os_vpc_provision_stack.py	30	SNS_NOTIFICATION_EMAIL = "user@example.com"	CODE

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	…/native-objects/native_objects/infrastructure_stack.py	25	def main_function(self) -> lambda_.IFunction:	CODE
LOW	…ipt/postgres-lambda/lambda/postgres-to-lambda/index.js	57	function processData(data) {	CODE

AI Slop Vocabulary1 hit · 2 pts

Severity	File	Line	Snippet	Context
MEDIUM	typescript/batch-ecr-openmp/scripts/submit-job.sh	86	echo " $0 --benchmark-type all # Run comprehensive 5-minute suite"	CODE

aws-samples/aws-cdk-examples

Open-Source Code Quality, Security and Technical Debt Review

Risk Review · Payload v1

What These Metrics Mean

Pattern-Signal History

Severity Breakdown

Directory Score Breakdown

Pattern Findings