AWS PaaS features

PaaS or platform-as-a-service is in the middle between IaaS and SaaS as far as security responsibilities are concerned. AWS provides the infrastructure and a platform, but it doesn’t provide all of the software as it would in SaaS. PaaS services are software developer tools most of the time. As a pentester, you generally can only pentest PaaS services under very limited conditions. A lot of what you’re permitted to do in IaaS is forbidden in PaaS. When in doubt, assume by default that you’re not allowed to do something, and consult the AWS penetration testing policy (https://aws.amazon.com/security/penetration-testing/). In some situations, such as network stress testing, you may submit a form to AWS to request permission to do something. Only proceed with your plans for your red team engagement when you’ve verified that AWS will permit you to do everything you plan to do. You may have to tweak or adjust your plans according to AWS’...