Integration Guide

Local-First Protection for Amazon Q Developer

Amazon Q Developer sends code context to AWS infrastructure. Pretense intercepts those calls and mutates identifiers so your algorithms stay private.

under 10msadded latency

Local-firstnothing leaves your machine

5 minsetup time

Byte-exactreversal guaranteed

How to Protect Amazon Q Developer in 3 Steps

One environment variable. No code changes. No workflow disruption.

Run pretense init in your project root. Pretense builds a mutation profile for your codebase.

Configure your environment to route Amazon Q API calls through localhost:9339.

Every Amazon Q request is logged with mutation details. Export for SOC2 or internal audits.

Pretense transforms your real identifiers into synthetic tokens before transmission. The LLM sees structure and logic, not your proprietary names.

Without Pretense: raw identifiers exposed

// Before Pretense mutation
async function getUserPaymentToken(userId: string) {
  return await stripeClient.createToken(userId, STRIPE_SECRET);
}

Your function names, secrets, and architecture are transmitted verbatim.

With Pretense: synthetic identifiers only

// After Pretense mutation (what the LLM sees)
async function _fn4a2b(_v8c3d: string) {
  return await _v2f1a._fn9e4b(_v8c3d, _v7d2c);
}

Structure intact. LLM quality preserved. Your IP stays private.

After the LLM responds, Pretense reverses every mutation. You receive real, working code with your original identifiers restored byte-for-byte.

terminal

$ npm install -g pretense && pretense start

$ pretense init

$ pretense start

NOTE

Redirect Amazon Q API calls through http://localhost:9339

Does Pretense work with the AWS CLI and Q integration?

Pretense works at the HTTP proxy layer and is compatible with any tool that uses configurable API endpoints.

What about AWS CodeWhisperer (now Q)?

Amazon Q Developer is the successor to CodeWhisperer. Pretense protects all Q Developer API traffic.

Can Pretense help with AWS compliance requirements?

Yes. Pretense audit logs include mutation metadata compatible with AWS compliance frameworks.

No code changes. No workflow disruption. One environment variable and Pretense intercepts every request.

No credit card required. 30-second setup. Local-first, nothing leaves your machine.