Penetration testing is a cyber attack against your infrastructure to test exploitable vulnerabilities. The main objective of pen testing is to determine security weakness. AWS considers pen testing as abusive behavior so it, by default, blocks the source IP. Before performing pen testing, you need to inform AWS about the test.
Submitting a penetration testing request
Getting ready
You can request authorization for penetration testing by signing in with your root account credentials and filling out the AWS Vulnerability/Penetration Testing Request Form. AWS will follow up on your request within 2 business days.
You cannot perform pen testing on small/micro/nano EC2 or RDS instances.