Products
In-IDE
IDE extension that lets you fix coding issues before they exist!
Discover SonarQube for IDE
SaaS
Setup is effortless and analysis is automatic for most languages
Discover SonarQube Cloud
Self-Hosted
Fast, accurate analysis; enterprise scalability
Discover SonarQube Server

Secrets
ABAP
Ansible
Apex
AzureResourceManager
C
C#
C++
CloudFormation
COBOL
CSS
Dart
Docker
Flex
Go
HTML
Java
JavaScript
JSON
JCL
Kotlin
Kubernetes
Objective C
PHP
PL/I
PL/SQL
Python
RPG
Ruby
Rust
Scala
Swift
Terraform
Text
TypeScript
T-SQL
VB.NET
VB6
XML
YAML

Python static code analysis

Unique rules to find Bugs, Vulnerabilities, Security Hotspots, and Code Smells in your PYTHON code

Filtered: 30 rules found

aws

Impact

Clean code attribute

AWS waiters should be used instead of custom polling loops
Code Smell
Long-term AWS access keys should not be used directly in code
Code Smell
boto3 operations that support pagination should be performed using paginators or manual pagination handling
Code Smell
AWS Lambda handlers should clean up temporary files in /tmp directory
Bug
"botocore.exceptions.ClientError" must be explicitly catch and handled
Code Smell
Network calls in AWS Lambda functions shouldn't be made without explicit timeout parameters
Bug
Reserved environment variable names should not be overridden in Lambda functions
Code Smell
S3 operations should verify bucket ownership using ExpectedBucketOwner parameter
Vulnerability
Allowing unrestricted outbound communications is security-sensitive
Security Hotspot
Creating public APIs is security-sensitive
Security Hotspot
Using unencrypted EFS file systems is security-sensitive
Security Hotspot
Using unencrypted SQS queues is security-sensitive
Security Hotspot
Allowing public network access to cloud resources is security-sensitive
Security Hotspot
Using unencrypted SNS topics is security-sensitive
Security Hotspot
Administration services access should be restricted to specific IP addresses
Vulnerability
Using unencrypted SageMaker notebook instances is security-sensitive
Security Hotspot
AWS IAM policies should limit the scope of permissions given
Vulnerability
Using unencrypted OpenSearch domains is security-sensitive
Security Hotspot
Policies granting access to all resources of an account are security-sensitive
Security Hotspot
Using unencrypted RDS DB resources is security-sensitive
Security Hotspot
Policies granting all privileges are security-sensitive
Security Hotspot
Allowing public ACLs or policies on a S3 bucket is security-sensitive
Security Hotspot
Using unencrypted EBS volumes is security-sensitive
Security Hotspot
Policies authorizing public access to resources are security-sensitive
Security Hotspot
Granting access to S3 buckets to all or authenticated users is security-sensitive
Security Hotspot
AWS region should not be set with a hardcoded String
Code Smell
Disabling versioning of S3 buckets is security-sensitive
Security Hotspot
Authorizing HTTP communications with S3 buckets is security-sensitive
Security Hotspot
Lambdas should not invoke other lambdas synchronously
Code Smell
Reusable resources should be initialized at construction time of Lambda functions
Code Smell

"botocore.exceptions.ClientError" must be explicitly catch and handled

consistency - conventional

maintainability

reliability

Code Smell

This rule raises an issue when botocore.exceptions.ClientError can be thrown but are not explicitly caught and handled.

Why is this an issue?

How to fix

More Info

AWS Lambda functions in Python use boto3, the AWS SDK, to communicate with other AWS services. boto3 operations can fail due to service-specific reasons like:

A requested s3 object does not exist
Insufficient permissions
Service rate limit
Network glitches and other temporary service issues

These errors are typically surfaced as botocore.exceptions.ClientError. Failing to handle these exceptions correctly by not catching them or using a broad try/except block can undermine the lambda function’s reliability and ease of debugging.

What is the potential impact?

Not catching and appropriately handling botocore.exceptions.ClientError in AWS Lambda functions can lead to:

Opaque dead letter queue messages
Suppressed retries
Unclear root causes in log messages
Poor API responses
Silent failures when errors are caught and ignored
Wasted resources by retrying operations that fail and are not properly handled

Available In:

Catch issues on the fly,
in your IDE

Detect issues in your GitHub, Azure DevOps Services, Bitbucket Cloud, GitLab repositories

Analyze code in your
on-premise CI

In-IDE

SaaS

Self-Hosted