Penetration testing for Amazon API Gateway and AWS Lambda Functions

Question

I want to do a penetration test by applying a load to a solution developed with API Gateway and Lambda Functions.

Is it possible for them to do it without any approval from AWS? Or does AWS prohibit this kind of tests for security purposes?

Thanks

Accepted Answer

For the most up to date information on what you can and cannot execute in terms of penetration testing, please refer to https://aws.amazon.com/security/penetration-testing/. This will also include a list of prohibited activities.

At the time of this answer you're welcome to conduct security assessments against AWS resources that you own if they make use of the services listed below.

* Amazon EC2 instances, NAT Gateways, and Elastic Load Balancers
* Amazon RDS
* Amazon CloudFront
* Amazon Aurora
* Amazon API Gateways
* AWS Lambda and Lambda Edge functions
* Amazon Lightsail resources
* Amazon Elastic Beanstalk environments

Penetration testing for Amazon API Gateway and AWS Lambda Functions

Contenus pertinents