AgentShield
How it works
All use cases Snowflake Cortex security Gemini Enterprise security Bedrock AgentCore security Azure AI Foundry security OpenRouter security AI gateway LLM security RAG security MCP server security Coding agents Customer service agents AI agent governance AI compliance Government Financial services Enterprise agents AI firewall Agentic AI security AI agent monitoring AI-SPM Agent hardening Tools compared Agent access control Agent identity AI data leak prevention Human in the loop Agent sandboxing AI penetration testing AI agent guardrails Healthcare Legal Insurance Multi-agent security Zero trust for agents Threat modeling AI runtime security MCP gateway LangChain security Claude agent security OpenAI agent security OpenClaw security Hugging Face security Cursor AI security n8n security Copilot Studio security LiteLLM security Gemini CLI security GitHub Copilot security Microsoft 365 Copilot security Kiro security Codex security Microsoft Agent 365 security OpenAI Agent Builder security Microsoft Agent Framework security Google ADK security Flowise security NeMo Agent Toolkit security Zendesk AI agents security ChatGPT workspace agents security Amazon Quick Suite security Oracle AI Agent Studio security Pydantic AI security Mastra AI security Dify AI security Notion Custom Agents security Zapier MCP security Gemini Enterprise Agent Platform security OpenAI Agents API security Claude Managed Agents security Copilot Cowork security ServiceNow AI agents security watsonx Orchestrate security SAP Joule security UiPath agent guardrails Workday agent security GitLab Duo agent security Intercom Fin agent security Atlassian Rovo security Claude Code enterprise security Windsurf security Devin security Replit enterprise security Gemini Code Assist enterprise security Augment Code enterprise security Amazon Q Developer enterprise security Cline enterprise security Security
Pricing Blog FAQ Contact Sign in

Amazon Q Developer Pricing and the Security Costs Beside It

AgentShield Security Team·Nov 10, 2026·6 min read

Try it live

Watch AgentShield block an attack in real time.

Pick a scenario and drive the inspection lane yourself. No signup needed.

Threat Console
Interactive demo · 0 blocked in this session

Run a request

Runs the live engine on your text. Nothing is stored, no account needed.

Inspection lane

INSPECTING
⌖ untrusted input

Policy trace

High-risk action held for approval

Audit trail

Amazon Q Developer Pro costs $19 per user per month, and a company budgeting a rollout should add the cost of making an agent that can act in AWS accounts safe to use. On the AWS pricing page, read on November 10, 2026, there are two tiers: Free and Pro. Rates change, so confirm them with AWS before you sign.

What each Amazon Q Developer tier includes

TierListed priceWhat the page says it includes
Free$050 agentic requests per month, 1,000 lines of Java transformation per user per month, reference tracking, opt-out of data collection
Pro$19 per user per monthIncreased agentic request limits, 4,000 lines of Java transformation per user per month pooled at the payer account, an admin dashboard with IAM Identity Center, IP indemnity, automatic opt-out of data collection

Transformation beyond the pool is $0.003 per line on Pro, so ten Pro seats give 40,000 pooled lines a month. The page does not state a number for Pro agentic requests or any security scan limit. Free limits apply per user for Builder ID sign-in and per account for IAM users.

How Amazon Q Developer costs add up

The seat fee is the predictable part. Transformation volume depends on how much legacy Java you migrate, and agentic requests depend on how much work engineers hand to the agent. A migration team can use the pooled lines quickly, while a team that only chats uses almost none. Billing follows the payer account, and canceling mid month still incurs the full month, according to the page.

The security costs that sit outside the seat price

Cost lineWho pays itTypical shape
Vendor review and contract termsSecurity and procurementCompliance scope, audit record contents, retention. Hours, not dollars
Least privilege roles for agent sessionsPlatform teamScoped roles per team, no administrator by default
Separating production from agent accountsEngineeringSeparate accounts and read-only access to production
Identity setupITIAM Identity Center configuration for Pro
Control on high-impact actionsSecurityRules and approval for deploys, permission changes, payments and bulk writes

The first four are mostly staff time and are worth doing whatever you buy. The last is a purchase decision and depends on what the agent can reach. The full review of what AWS publishes, and where each control stops, is on Amazon Q Developer enterprise security. When an approval request fires at night, someone has to see it, which is where incident paging software that routes to the right on-call engineer belongs in the plan.

A budgeting checklist before you sign

  1. Count the seats that need Pro features, meaning the admin dashboard and IAM Identity Center.
  2. Estimate Java transformation lines per month against the pooled allowance.
  3. Run a pilot and record agentic usage per engineer.
  4. Decide which AWS accounts agents may act in, and with which roles.
  5. List the production actions an agent may take. If the list is not empty, price a per call control for those paths, as covered on tool permissions.

For the Google equivalent, see Gemini Code Assist Enterprise pricing. For a flat-plan alternative, see Augment Code pricing.

How much does Amazon Q Developer Pro cost?

The AWS pricing page lists Pro at $19 per user per month. Java transformation beyond the pooled 4,000 lines per user costs $0.003 per line. Cost is billed through the payer account, and canceling mid month still incurs the full month.

Is Amazon Q Developer free?

There is a Free tier with 50 agentic requests per month and 1,000 lines of Java transformation per user. It has no admin dashboard and no IP indemnity, so it suits individual evaluation rather than a company rollout.

Does Amazon Q Developer Pro include security features?

The page lists an admin dashboard with IAM Identity Center, IP indemnity and automatic opt-out of data collection, and the user guide documents identity, data protection and network options. It does not list per call approval for what the agent does. Ask for that in writing, or cover it with a gateway in front of the tools the agent calls.

See the firewall block an attack live.

Drive the Threat Console and watch a real prompt injection get stopped, then put AgentShield in front of your own agents.

Open the console