import * as cloudfront from "aws-cdk-lib/aws-cloudfront";
import * as constructs from "constructs";
export type WebappSecurityHeadersProps = Partial<cloudfront.ResponseSecurityHeadersBehavior & {
    contentSecurityPolicy?: cloudfront.ResponseSecurityHeadersBehavior["contentSecurityPolicy"] & {
        /**
         * Whether to only monitor the effects of the content security policy without actually blocking anything.
         * @default false
         */
        reportOnly?: boolean;
    };
}>;
export interface ContentSecurityPolicyHeader {
    baseUri?: string;
    childSrc?: string;
    defaultSrc?: string;
    fontSrc?: string;
    frameSrc?: string;
    formAction?: string;
    frameAncestors?: string;
    imgSrc?: string;
    manifestSrc?: string;
    mediaSrc?: string;
    objectSrc?: string;
    scriptSrc?: string;
    styleSrc?: string;
    connectSrc?: string;
}
/**
 * Helper function that generates a string containing a Content Security Policy that can be
 * used in a security header.
 *
 * NOTE: The string can be further extended using string concatenation for directives that aren't currently supported by the function.
 */
export declare function generateContentSecurityPolicyHeader(headerOptions?: ContentSecurityPolicyHeader): string;
export declare class WebappSecurityHeaders extends constructs.Construct {
    readonly responseHeadersPolicy: cloudfront.ResponseHeadersPolicy;
    constructor(scope: constructs.Construct, id: string, props: WebappSecurityHeadersProps);
}