/**
 * StorageAccountSecure composite — Storage Account with security hardening.
 *
 * A higher-level construct that creates a Storage Account with
 * HTTPS-only, encryption at rest, default-deny network rules, and TLS 1.2.
 */
import { StorageAccount } from "../generated/index.js";
export interface StorageAccountSecureProps {
    /** Storage account name (3-24 chars, lowercase + digits only). */
    name: string;
    /** Azure region (default: resource group location). */
    location?: string;
    /** SKU name (default: "Standard_LRS"). */
    sku?: string;
    /** Resource tags. */
    tags?: Record<string, string>;
    /** Per-member defaults. */
    defaults?: {
        storageAccount?: Partial<ConstructorParameters<typeof StorageAccount>[0]>;
    };
}
export interface StorageAccountSecureResult {
    storageAccount: InstanceType<typeof StorageAccount>;
}
/**
 * Create a StorageAccountSecure composite — returns a Storage Account
 * resource with security best practices.
 *
 * @example
 * ```ts
 * import { StorageAccountSecure } from "@intentius/chant-lexicon-azure";
 *
 * const { storageAccount } = StorageAccountSecure({
 *   name: "myappstorage01",
 *   sku: "Standard_GRS",
 *   tags: { environment: "production" },
 * });
 *
 * export { storageAccount };
 * ```
 */
export declare const StorageAccountSecure: import("@intentius/chant").CompositeDefinition<StorageAccountSecureProps, {
    storageAccount: import("@intentius/chant").Declarable & Record<string, string>;
}>;
//# sourceMappingURL=storage-account.d.ts.map