title: AWS Pen test - vulnerability scanning
body: <p>I am trying to find out if it is correct to say that - In AWS we can only perform vulnerability scanning for EC2 instances.</p>
  <p>From my research, it seems like there can be pen tests on other AWS services, but vulnerability scanning seems to be focused on EC2? (<a href="https://aws.amazon.com/security/penetration-testing/" rel="nofollow noreferrer">https://aws.amazon.com/security/penetration-testing/</a>). If so, would it be safe to assume that vulnerabilities scans can be only focused on EC2 instances, but also periodic pen tests on the AWS services listed in the link above?</p>
  <p>Any help is appreciated.</p>