Chapter 11: Staying Out of Trouble
Pentesting can be very intrusive on AWS systems, and can also lead to legal issues if not executed correctly. When pentesting AWS, it's crucial to understand what you as a pentester can and cannot perform on an AWS system. These types of attacks bring systems down during a pentest and ruin your reputation, while also potentially destroying client systems and creating substantial revenue loss for both the pentesting company and the targeted client.
This chapter will discuss Denial of Service (DoS) and flooding attacks and how they work. Understanding how these attacks work illustrates the severity of the attacks and why we should stay away from them.
We will finish the chapter by discussing stress testing, which is also sometimes referred to as load testing, and get a high-level view as to what stress testing is and whether customers should be worried.
We will cover the following topics in this chapter:
- Prohibited activities ...