Using AWS to build an ethical hacking lab

From https://aws.amazon.com/premiumsupport/knowledge-center/penetration-testing/

You can carry out penetration tests against or from resources on your AWS account by following the policies and guidelines at Penetration Testing. You don't need approval from AWS to run penetration tests against or from resources on your AWS account.

If you plan to run a security test other than a penetration test, see the guidelines at Other simulated events.

Note: You aren't permitted to conduct any security assessments of AWS infrastructure that isn't on your AWS account. You also aren't permitted to conduct security assessments of AWS services themselves. If you discover a security issue within any AWS service in the course of your security assessment, contact AWS Security immediately.