Which of the following steps should be taken by a customer when conducting penetration testing on AWS?

Which of the following steps should be taken by a customer when conducting penetration testing on AWS?
A . Conduct penetration testing using Amazon Inspector, and then notify AWS support.
B . Request and wait for approval from the customer’s internal security team, and then conduct testing.
C . Notify AWS support, and then conduct testing immediately.
D . Request and wait for approval from AWS support, and then conduct testing.

View Answer

Answer: B

Explanation:

AWS customers are welcome to carry out security assessments or penetration tests against their AWS infrastructure without prior approval for 8 services.

Reference: https://aws.amazon.com/security/penetration-testing/