FIELD GUIDE

Kiro CLI Versus Amazon Q Developer CLI: Migrate Rules, Auth and Licenses Deliberately

The migration from Amazon Q Developer CLI to Kiro CLI is not just an executable rename. Kiro’s first-party migration guide, updated in August 2026, documents preserved entry points and copied settings but also a distinct software

The migration from Amazon Q Developer CLI to Kiro CLI is not just an executable rename. Kiro’s first-party migration guide, updated in August 2026, documents preserved entry points and copied settings but also a distinct software license and different configuration locations. A production team should treat this as a controlled version change.

Capabilities and integration boundaries

Kiro’s guide says existing Q Developer CLI users can continue to invoke q or q chat through compatibility paths, with a new kiro-cli entry point and migration of prompts, agents, MCP configuration and rules. It distinguishes AWS Builder ID and IAM Identity Center from newer social/GitHub sign-in options. Kiro CLI’s newer V3 rollout also changes permission-rule concepts and includes explicit warnings about conversion of custom agents and hooks.

A reproducible developer workflow

Inventory the old ~/.aws/amazonq and project .amazonq files, back them up, and test migration in a clean environment. Compare the new ~/.kiro paths and check for conflicts or skipped MCP servers. Run a read-only repository exploration, then one simple test repair with tool approvals enabled. If adopting V3, dry-run agent configuration upgrades and inspect diagnostics before permitting new shell commands.

Limitations and failure cases

Backward compatibility is not a promise that every policy maps perfectly or that Q CLI remains the long-term feature target. The migration guide explicitly says new improvements focus on Kiro. Subscription continuation is conditional on identity and contract; free-tier behavior is not interchangeable with managed enterprise terms. Release notes describe features rolling out gradually, so a rollout plan should name the exact installed version.

Data handling, approvals and security

The documented difference in license between old Q CLI and Kiro CLI is material for software distribution reviews. Kiro explains that content usage for service improvement varies with identity and entitlement, so security review must record sign-in method. Deny broad aws shell patterns and validate every migrated MCP tool before trusting it with credentials.

Who should adopt it

Choose Kiro CLI if you already depend on Amazon Q CLI and need a supported successor, but test existing hooks, governance and licensing before switching every developer. Keep a rollback installation and original config backup.

Alternatives and decision trade-offs

Compare Kiro IDE for spec-driven development, or OpenCode and Claude Code for alternative terminal permission systems. Do not compare subscriptions using stale per-seat price claims.

Version, region and entitlement caveats

Research and first-party documentation checked on 25 October 2026 (cutoff date). Documented version or status scope: transition documented 2026-08-04; V3 rollout October 2026. The documentation does not independently establish availability in every country, an exact installed client release, a universal enterprise contract, or a perpetual price. No unverified seat price, request quota, API rate, model entitlement or commercial-license guarantee is supplied here. Check AI 10 dated pricing snapshots and the signed agreement before procurement. The examples are suggested evaluation methods, not experiments or benchmarks performed for this article.

Checklist before production rollout

  1. Record the exact installed version, service account, organization policy and contract or plan applicable to the tested environment.
  2. Create a clean worktree; specify the task boundary, forbidden paths, acceptance criteria and rollback before tool execution.
  3. Audit file, shell, network, extension and repository-app permissions; deny all unnecessary credentials and privileged actions.
  4. Review each resulting diff for unrequested packages, automation changes, data leaks and behavioral regressions.
  5. Run targeted tests, existing integration/regression tests and independent code/security review in a trusted environment.

Sources & Further Reading

CONTINUE EXPLORINGExplore related files ↗