Submitting a penetration testing request

Penetration testing is a cyber attack against your infrastructure to test exploitable vulnerabilities. The main objective of pen testing is to determine security weakness. AWS considers pen testing as abusive behavior so it, by default, blocks the source IP. Before performing pen testing, you need to inform AWS about the test.

Getting ready

You can request authorization for penetration testing by signing in with your root account credentials and filling out the AWS Vulnerability/Penetration Testing Request Form. AWS will follow up on your request within 2 business days.

You cannot perform pen testing on small/micro/nano EC2 or RDS instances.

How to do it...

1. Log in to the AWS Console using the root account.
2. Click on the URL to open the form: https://aws.amazon.com/forms/penetration-testing-request
3. Provide all the required details:
   1. Contact Information:

Penetration Testing Form

1. 2. Scan Information:

Penetration Testing Form

3. Click I agree in the Terms and Conditions...