/**
 * WAW042: S3 Bucket Missing TLS-Only Policy
 *
 * Flags S3 buckets without a companion BucketPolicy that denies requests made
 * over plaintext (a Deny statement keyed on `aws:SecureTransport` being
 * false). Encryption at rest is WAW006; the public-access block is WAW018;
 * this covers encryption in transit.
 */
import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
export declare function checkS3TlsOnlyPolicy(ctx: PostSynthContext): PostSynthDiagnostic[];
export declare const waw042: PostSynthCheck;
//# sourceMappingURL=waw042.d.ts.map