import type { HostSettings } from "../../host/host.js";
import { type ResultFailure } from "../../runtime/result.js";
/**
 * AWS credentials read from the environment — the only credential source in v1.
 * Region is resolved separately (see `resolveRegion`) and validated into a
 * partition (see `endpoints.ts`).
 */
export type AwsCredentials = {
    readonly accessKeyId: string;
    readonly secretAccessKey: string;
    readonly sessionToken?: string;
};
/** Read AWS credentials from the environment, through the host's settings,
 *  or a `failure` naming what's missing. */
export declare function resolveAwsCredentials(settings: HostSettings): AwsCredentials | ResultFailure;
/** Region precedence: explicit argument, then `AWS_REGION`, then `us-east-1`. */
export declare function resolveRegion(regionOverride: string, settings: HostSettings): string;