Learn how to integrate Amazon Q Developer with the Sysdig Model Context Protocol (MCP) server to secure your Infrastructure as Code (IaC) directly in VS Code. Discover how to scan configurations, find vulnerabilities, and predict security posture before deployment using AI-driven workflows.

Sysdig Blog

A walkthrough of integrating Amazon Q Developer with the Sysdig MCP server inside VS Code to implement shift-left security for Infrastructure as Code. The setup enables developers and SREs to scan CloudFormation templates and Helm charts for misconfigurations, check container images for vulnerabilities, review current cloud posture (EKS, S3), and predict attack paths before deployment — all through conversational prompts without leaving the IDE.

Shifting left with AI and MCP: Sysdig + Amazon Q Developer