Penetration Test against App Runner

Hello,

Penetration tests can be performed against or from resources on your AWS account by following the policies and guidelines at Penetration Testing. You don't need approval from AWS to run penetration tests against or from resources on your AWS account.

If you need to perform other operations such as running security test other than a penetration test, see the guidelines at Other simulated events.

Further more, you are not permitted to perform any security assessments of AWS infrastructure that is not on your AWS account.

You are also not permitted to conduct security assessments of AWS services themselves. If you discover a security issue within any AWS service in the course of your security assessment, contact AWS Security immediately.

To request permissions for other simulated environments, submit a request using the Simulated Event form and provide a full description of your planned event, including details, risks, and desired outcomes.

I hope this helps.