# Vulnerability analysis in Amazon API Gateway
<a name="vulnerability-analysis"></a>

Configuration and IT controls are a shared responsibility between AWS and you, our customer. For more information, see the AWS [shared responsibility model](https://aws.amazon.com/compliance/shared-responsibility-model/).