/**
 * TL-PERM-003 - Lambda trigger missing a resource-based permission.
 *
 * EventBridge rules, SNS subscriptions, and S3 bucket notifications invoke a
 * function via its RESOURCE policy, not the caller's role. Without a matching
 * AWS::Lambda::Permission the trigger silently never fires - no error lands
 * anywhere except the trigger service's delivery metrics. This targets raw
 * CloudFormation / CfnResource usage; the CDK L2 wiring creates the
 * permission automatically (and CDK's Custom::S3BucketNotifications pattern
 * is explicitly skipped).
 */
import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../types/analysis.types';
export declare const checkLambdaTriggerMissingPermission: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;