Amazon is a company that has policies around certain uses of their networks. For this reason, they require some paperwork for penetration testing. OpenStack is not a company, but an open-source technology, and doesn't require any paperwork apart from you agreeing to the Apache license. Basically, you can use OpenStack for whatever purpose.

Companies that run their public cloud on OpenStack, however, might have similar policies as Amazon.