How to block Amazon Q

How to block Amazon Q on every device

Amazon Q Developer is AWS’s AI coding assistant. This page covers the Q and CodeWhisperer service hosts; the AWS console and amazon.com are not blocked. Below: how to block Amazon Q in the browser, on phones and tablets, on your home or school network, and on managed devices.

Start a free trial

AI blocker suite for browsers, desktop, and mobile

Chrome
Edge
Firefox
Safari
iOS
Android
macOS
Windows

Blocks prompts and AI apps
100% on-device processing

Amazon Q

AI coding tools

q.us-east-1.amazonaws.comBlocked

2 hostnames in the Nullgen catalog

Every entry also covers its subdomains, so the Amazon Q app and API are blocked too.

What Amazon Q connects to

These are the hostnames Amazon Q uses for its website, its apps, and its API. Each entry is matched as a suffix — blocking q.us-east-1.amazonaws.com also blocks every subdomain of it — so the Amazon Q app cannot slip through on a hostname that is not listed. Shared hosts that other products need are deliberately left out.

Hostnames blocked for Amazon Q
Hostname	Role
q.us-east-1.amazonaws.com	Main website
codewhisperer.us-east-1.amazonaws.com	App, API, or content host

Amazon Q inside the AWS console is not blocked

Amazon Q Developer also lives inside the AWS console, which shares hosts with the rest of AWS and amazon.com. This guide blocks the Q and CodeWhisperer service hosts that the IDE plugins and CLI use.

Block Amazon Q in the browser

Free: the Nullgen browser extension

The free extension blocks Amazon Q and every other tool in the catalog in Chrome, Edge, Firefox, and Safari. It works on the page itself — no DNS change, no policy — and updates as the catalog grows.

Download Free Extension

Managed browsers: block the sites by policy

On a school or company fleet, push the hostnames as a browser policy so Amazon Q is blocked even when someone uninstalls extensions. These snippets use the official Chrome, Edge, and Firefox policy names and the same hosts listed above.

Chrome and Edge — URLBlocklist

{
    "URLBlocklist": [
        "codewhisperer.us-east-1.amazonaws.com",
        "q.us-east-1.amazonaws.com"
    ]
}

Firefox — policies.json

{
    "policies": {
        "WebsiteFilter": {
            "Block": [
                "*://codewhisperer.us-east-1.amazonaws.com/*",
                "*://*.codewhisperer.us-east-1.amazonaws.com/*",
                "*://q.us-east-1.amazonaws.com/*",
                "*://*.q.us-east-1.amazonaws.com/*"
            ]
        }
    }
}

Chrome and Edge treat a bare hostname as the host plus every subdomain. Firefox needs both the apex and the wildcard pattern.

Need every AI tool in one file, or a .reg or macOS profile?

Open the free policy generator

Block the Amazon Q app on phones and tablets

Nullgen mobile app

The Nullgen app blocks Amazon Q and 100+ other AI apps and sites on the whole device with an on-device filter — the app, the website, and the API, on any network, with no DNS server to run. Included with Nullgen Pro.

Download on the App Store

Coming soon

Without Nullgen: Screen Time on iPhone and iPad

1Open Settings → Screen Time → Content & Privacy Restrictions and turn restrictions on. This covers Amazon Q in Safari and in apps that use Apple’s web filter.
2Under Web Content, choose Limit Adult Websites — the setting that lets you deny q.us-east-1.amazonaws.com by name.
3Under Never Allow, add q.us-east-1.amazonaws.com. Safari and apps that use Apple’s web filter will refuse it.
4To keep the Amazon Q app off the device entirely, delete it and set Installing Apps to Don’t Allow, or use Ask to Buy on a child’s Apple Account.

Without Nullgen: Family Link on Android

1Open Family Link, choose the child, then Controls → Content restrictions → Google Chrome — where Amazon Q can be blocked by site.
2Choose Only allow approved sites, or add q.us-east-1.amazonaws.com under Blocked sites.
3Under Controls → App limits, block the Amazon Q app, or require approval for new installs from Google Play.

Block Amazon Q on your home or school network

A DNS blocker such as Pi-hole, AdGuard Home, NextDNS, or pfBlockerNG blocks Amazon Q for every device on the network — laptops, phones, consoles, and the Amazon Q app — without installing anything on them. Subscribe to the Amazon Q file from the public blocklist, or paste the rules directly.

Subscribe to the Amazon Q list

Every vendor, one list — on GitHub

AdGuard Home, uBlock Origin, and Brave rules

||codewhisperer.us-east-1.amazonaws.com^
||q.us-east-1.amazonaws.com^

DNS blocking cannot see inside a VPN or a phone on mobile data. For a block that follows the device, use the Nullgen apps or an MDM profile.

Block Amazon Q on managed devices

Schools and companies can block Amazon Q on every managed iPhone, iPad, laptop, and Chromebook from the MDM they already run — Intune, Jamf, Kandji, or Google Workspace — with per-person policies and an approval flow for legitimate use. Nullgen Pro provides the profiles and the dashboard; these guides walk through the setup.

Start a free trial

Questions about blocking Amazon Q

Does the free Nullgen extension block Amazon Q?
Yes. The free extension blocks prompts on Amazon Q and every other AI tool in the catalog in Chrome, Edge, Firefox, and Safari. It works on the page itself, so it needs no policy and no DNS change.
Will blocking Amazon Q break other websites?
No. Every hostname on this page belongs to Amazon Q alone. Shared websites that other products depend on are never on the list — which is also why AI features built into those products stay reachable.
Can someone get around a Amazon Q block?
A browser-only block can be bypassed with another browser or the Amazon Q app, and a network block can be bypassed with a VPN or a phone on mobile data. A block on the device itself — the Nullgen apps, Screen Time, or an MDM profile — follows the device wherever it goes.
Does this block the Amazon Q app, not just the website?
A DNS or device-level block does. The app talks to the same hostnames listed above, and every entry covers its subdomains, so the app cannot slip through on a hostname that is not listed. A browser policy or extension only covers the browser.
What happens when Amazon Q adds a new hostname?
The catalog is updated as vendors change, and the Nullgen apps, the extension, and the public blocklist all read from it, so a new hostname reaches every device without anyone editing a list by hand.

More coding tools

Browse all 100+ AI tools

Block Amazon Q today

Start with the free browser extension. Add Nullgen Pro when you need the Amazon Q app blocked on phones, tablets, and desktops, with approvals for the people who really need it.

Download Free Extension Explore plans