The AWS acceptable use policy for penetration testing allows?
AWS updated their policy and now allow AWS customers carry out security assessments or penetration tests against their AWS infrastructure without prior approval for 8 services.
References: