Catalog/Amazon Q (VS Code)

Transcripts

Amazon Q (VS Code)

The Amazon Q IDE extension may keep chat/prompt history as JSON under ~/.aws/amazonq/history.

AWS Linux · macOS · Windows files

Exposure

High
Stores found
1
Holds
personal data · source code
Confidence
unverified

Where it writes

1 store in the current signature database. Paths shown for a typical macOS install.

Transcripts high

files may hold personal data · source code

  • all OSes ~/.aws/amazonq/historydir

The Amazon Q IDE extension may keep chat/prompt history as JSON under ~/.aws/amazonq/history.

  • Prune ~/.aws/amazonq/history; SSO tokens live under ~/.aws/sso/cache.

Source: docs.aws.amazon.com

What to do about it

PromptDust flags these stores and leaves them in place; cleanup is your call. If a store holds a live secret, rotate the secret first, since deleting the file won’t un-leak a key that already sat in plain text.

For ongoing work, keep sensitive material out of sessions where you can, and prune old transcripts and caches now and then.

This describes where Amazon Q (VS Code) stores data. Metadata only, never your content. Confidence: unverified. Spot a mistake? Tell us.

See if this one’s on your machine.

One pass finds every store, for this tool and the other 51.