Amazon QDetector Library Sign in to Amazon Q

Amazon Q

Detector Library

Go detectors (42/42)

Useless if Body Channel Guarded With Mutex Improper Certificate Validation Unvalidated S3 Bucket Ownership Resource Leak Insecure Cookie Weak Random Number Generation Redundant Equality Check Insecure Ignore Host Key Unsafe Reflection Unchecked Batch Operation Failures Lambda Client Reuse Os Command Injection Log Injection Httptrace FileServer As Handler Pprof Endpoint Cross Site Scripting (XSS)Not Recommended API Usage Hidden Goroutine Channel Accessible By Non Endpoint Decompression Bomb Cross-Site Request Forgery (CSRF)Thread Safety Violation Insecure Connection Deprecated Key Generator Deprecated Get Configuration Exported Loop Pointer Server Side Request Forgery (SSRF)Sensitive Information Leak Integer Overflow Missing Pagination Insecure Cryptography Protection Mechanism Failure Temporary Files XML External Entity Insecure File Permissions Authentication Bypass By Alternate Name Improper authentication Use Filepath Join Path Traversal Write Pprof Profile Output Hardcoded true or false

Deprecated Get Configuration Low

The AWS AppConfig GetConfiguration API has been deprecated in favor of the AWS AppConfig Agent and the GetLatestConfiguration API.

Detector ID

go/deprecated-get-configuration@v1.0

Category

Common Weakness Enumeration (CWE)

-

Tags

# aws-best-practices