import type { AgentCoreComponentProps } from '../../base-props';
import { CfnResource } from 'aws-cdk-lib';
import { Construct } from 'constructs';
export interface CustomJWTAuthorizerConfig {
    readonly discoveryUrl: string;
    readonly allowedClients?: string[];
    readonly allowedAudience?: string[];
    readonly allowedScopes?: string[];
}
export interface AgentCorePaymentManagerProps extends AgentCoreComponentProps {
    readonly name: string;
    readonly authorizerType: 'AWS_IAM' | 'CUSTOM_JWT';
    readonly authorizerConfiguration?: {
        readonly customJWTAuthorizer: CustomJWTAuthorizerConfig;
    };
    readonly description?: string;
    readonly tags?: Record<string, string>;
}
/**
 * AgentCore PaymentManager construct.
 *
 * Creates an AWS::BedrockAgentCore::PaymentManager via the CfnResource escape hatch
 * (no L1 construct available yet), along with two IAM roles:
 * - ResourceRetrievalRole: passed as the Manager's RoleArn (service principal trust)
 * - ProcessPaymentRole: used by agent runtimes to call ProcessPayment (account root trust)
 *
 * The deploying principal must have iam:PassRole on the ResourceRetrievalRole for
 * the PaymentManager CFN handler to validate access.
 */
export declare class AgentCorePaymentManager extends Construct {
    readonly paymentManagerId: string;
    readonly paymentManagerArn: string;
    readonly processPaymentRoleArn: string;
    readonly resourceRetrievalRoleArn: string;
    readonly cfnResource: CfnResource;
    constructor(scope: Construct, id: string, props: AgentCorePaymentManagerProps);
}
//# sourceMappingURL=AgentCorePaymentManager.d.ts.map