/**
 * WAW047: ECS Privileged Container
 *
 * Flags ECS TaskDefinition containers running with Privileged: true — the
 * container gets elevated access to the host, equivalent to root on the EC2
 * instance (and rejected outright on Fargate).
 */
import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
export declare function checkEcsPrivilegedContainer(ctx: PostSynthContext): PostSynthDiagnostic[];
export declare const waw047: PostSynthCheck;
//# sourceMappingURL=waw047.d.ts.map