The management components of VMC are continuously scanned for vulnerabilities, and if found, public guidance is released. This includes the responsibility for protecting the software and systems that make up the VMware Cloud service.
Penetration and Security testing is allowed against an SDDC. If penetration and security testing is needed, approval is required first. This will send a notification sent to the internal VMC team that includes test plans and dates.
To request this approval, please fill out this
Request Form. This is to be completed by the Customer's Engineer who will be executing the testing. See the
VMC on AWS FAQ for more information.