import * as Effect from "effect/Effect"; import type { Role } from "../IAM/Role.ts"; /** * Shared scaffolding for AWS Comprehend HTTP bindings. * * NOT exported from `index.ts` — every `{Op}Http.ts` in this service is a * thin `Layer.effect(Cap, make…HttpBinding({ … }))` over one of the two * builders below. Everything except the operation and the IAM action list is * boilerplate: Comprehend's real-time detect APIs and async job APIs have no * resource-level IAM, so every grant is on `*`. The `Start*Job` operations * additionally inject the bound data-access role and a scoped `iam:PassRole` * grant. */ /** * Build the impl Effect for a Comprehend operation with no bound resource * (real-time detection, job describe/list/stop). The deploy-time half grants * `actions` on `*` — Comprehend detection and job IAM actions do not support * resource-level scoping. */ export declare const makeComprehendHttpBinding: (options: { /** Fully-qualified binding tag, e.g. `AWS.Comprehend.DetectEntities`. */ tag: string; /** The distilled operation, invoked with the caller's request as-is. */ operation: Effect.Effect<(input: I) => Effect.Effect, never, R>; /** IAM actions granted on `*`. */ actions: readonly string[]; }) => Effect.Effect<() => Effect.Effect<(request?: I | undefined) => Effect.Effect, never, never>, never, R>; /** * Build the impl Effect for a `Start*Job` operation: the binding is * constructed with the **data-access role** (the IAM role Amazon Comprehend * assumes to read input documents from S3 and write results; its trust * policy must allow `comprehend.amazonaws.com`). The role's ARN is injected * as `DataAccessRoleArn` on every runtime request, and the deploy-time half * grants `actions` on `*` plus `iam:PassRole` on the role — without the * PassRole grant, `Start*Job` fails only at runtime with an AccessDenied. */ export declare const makeComprehendStartJobHttpBinding: (options: { /** Fully-qualified binding tag, e.g. `AWS.Comprehend.StartSentimentDetectionJob`. */ tag: string; /** The distilled operation; `DataAccessRoleArn` is injected from the role. */ operation: Effect.Effect<(input: I) => Effect.Effect, never, R>; /** IAM actions granted on `*`. */ actions: readonly string[]; }) => Effect.Effect<(dataAccessRole: Rl) => Effect.Effect<(request: Omit & { DataAccessRoleArn?: string; }) => Effect.Effect, never, never>, never, R>; //# sourceMappingURL=BindingHttp.d.ts.map