/** * TL-PERM-005 - Step Functions role missing permissions for a service * integration declared in the state machine definition. * * Task states declare their integration explicitly (Resource: * "arn:aws:states:::dynamodb:getItem" + Parameters.TableName), so the * required IAM action is deterministic. Definitions that cannot be statically * recovered (Fn::Join-built strings, opaque intrinsics) are skipped entirely - * this rule targets raw CfnStateMachine usage; the CDK L2 `tasks.*` constructs * grant the role automatically. */ import type { AnalysisResults, CloudFormationStack, CreateFindingFunction } from '../../../../types/analysis.types'; export declare const checkStateMachineIntegrationPermissions: (template: CloudFormationStack, createFinding: CreateFindingFunction) => AnalysisResults;