import * as acm from 'aws-cdk-lib/aws-certificatemanager';
import type * as route53 from 'aws-cdk-lib/aws-route53';
import { Construct } from 'constructs';
/** Properties for a DNS-validated CloudFront certificate. */
export interface CloudFrontCertificateProps {
    /** Domain name to certify, including a wildcard if required. */
    readonly domainName: string;
    /** Public Route 53 hosted zone in this account containing the domain. */
    readonly hostedZone: route53.IHostedZone;
}
/**
 * Creates an ACM certificate in us-east-1, regardless of the stack region.
 * Deployment waits for DNS validation before exposing the certificate ARN.
 * All instances in a stack share the provider and its singleton Lambda handlers.
 * Domain or hosted zone changes replace the certificate. Validation CNAMEs are
 * retained on deletion because ACM can share them with other certificates.
 */
export declare class CloudFrontCertificate extends Construct {
    /** ARN of the issued certificate, suitable for Certificate.fromCertificateArn. */
    readonly certificateArn: string;
    /** Certificate reference that can be passed directly to CDK constructs. */
    readonly certificate: acm.ICertificate;
    constructor(scope: Construct, id: string, props: CloudFrontCertificateProps);
}