Stephane: Okay, so now let's talk about
penetration testing on the Cloud.
So, penetration testing is when you're trying to attack
your own infrastructure to test your security.
A customer of AWS is welcome
to carry out these security assessments
and penetration testing against your own infrastructure
without prior approval for eight services.
So, our Amazon EC2 instances,
NAT Gateways and Elastic Load Balancers, Amazon RDS,
CloudFront, Aurora, the API Gateways, Lambda,
and Lambda Edge functions,
Lightsail resources and Elastic Beanstalk environments.
The list can increase over time,
but this is not something that you will be tested
on at the exam.
Just remember that you don't need an authorization
for these eight services,
but if you wanted to do other type of activities
that could be prohibited.
For example, you cannot do a DNS zone walking
via Amazon Route 53 Hosted Zone.
You can not perform a distributed attack on your system,
so you cannot perform a DoS or DDoS or a Simulated DoS
or Simulated DDoS.
You cannot just attack your own infrastructure
with a denial of service.
You can not do port flooding.
You can undo protocol flooding, request flooding,
which are, you know, variants of an attack.
And for any other events,
you need to contact the security team at AWS
to ensure that they can approve it.
If you wanted to read more, you can read more here.
So, from an exam perspective, yes,
you can do pen testing on your Cloud.
Remember that some are authorized,
but anything that looks like an attack such as DDoS attack
or a DNS zone walking or a port flooding is not authorized
because for AWS,
it would seem like you're trying to attack
their infrastructure and they wouldn't like it.
So, I hope that was helpful
and I will see you in the next lecture.