/**
 * TL-PERM-001 - Compute role grants no permissions for a referenced resource.
 *
 * When a Lambda function or ECS task definition receives a resource reference
 * through an environment variable (the standard CDK pattern for handing a
 * table/bucket/queue to code), the execution role almost always needs at
 * least one action in that service's namespace. Zero coverage means the
 * forgotten-grant footgun: AccessDenied at runtime.
 *
 * Fires ONLY on provable zero coverage; every unresolvable or conditional
 * construct is treated as covered (see iamCoverageHelpers module header).
 */
import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../types/analysis.types';
export declare const checkComputeEnvMissingPermissions: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;