Full AWS Practitioner Certification Question

During a security assessment, which stakeholder is typically responsible for providing detailed technical information about system configurations and potential vulnerabilities?