Penetration testing is something that customers like to do when running on AWS. You have to be pre approved to run a pen test on AWS unless you use an Amazon Marketplace AMI from Tenable.
You can read about the Tenable solution here:
http://static.tenable.com/partners/Tenable_AWS_Solution_Brief.pdf
Here is the Amazon Marketplace AMI:
https://aws.amazon.com/marketplace/pp/B00G9A5MS0/ref=srh_res_product_title?ie=UTF8&sr=0-3&qid=1402498041820#support
Here is the form if you were not using the Tenable solution:
http://aws.amazon.com/security/penetration-testing/
You can read about the Tenable solution here:
http://static.tenable.com/partners/Tenable_AWS_Solution_Brief.pdf
Here is the Amazon Marketplace AMI:
https://aws.amazon.com/marketplace/pp/B00G9A5MS0/ref=srh_res_product_title?ie=UTF8&sr=0-3&qid=1402498041820#support
Here is the form if you were not using the Tenable solution:
http://aws.amazon.com/security/penetration-testing/