By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Penetration testing for Amazon API Gateway and AWS Lambda Functions

0

I want to do a penetration test by applying a load to a solution developed with API Gateway and Lambda Functions.

Is it possible for them to do it without any approval from AWS? Or does AWS prohibit this kind of tests for security purposes?

Thanks

Topics
ServerlessComputeFront-End Web & MobileNetworking & Content Delivery
Tags
AWS LambdaAmazon API Gateway
Language
English
AWS
kizanlik
asked 5 years ago762 views
1 Answer
0
Accepted Answer

For the most up to date information on what you can and cannot execute in terms of penetration testing, please refer to https://aws.amazon.com/security/penetration-testing/. This will also include a list of prohibited activities.

At the time of this answer you're welcome to conduct security assessments against AWS resources that you own if they make use of the services listed below.

  • Amazon EC2 instances, NAT Gateways, and Elastic Load Balancers
  • Amazon RDS
  • Amazon CloudFront
  • Amazon Aurora
  • Amazon API Gateways
  • AWS Lambda and Lambda Edge functions
  • Amazon Lightsail resources
  • Amazon Elastic Beanstalk environments
MODERATOR
AWS-User-5355894
answered 5 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content