import * as core from 'aws-cdk-lib';
import { aws_iam as iam } from 'aws-cdk-lib';
import * as constructs from 'constructs';
export interface AppSpec {
    readonly name: string;
    readonly groups?: string[];
}
export interface AuthInfrastructureProps {
    readonly ssmParamPrefix?: string;
    readonly zoneName: string;
    readonly tenantId: string;
    readonly clientId: string;
    readonly oauth2CallbackRoleName: string;
    readonly appSpec: AppSpec;
    readonly cookieDomain?: string;
    readonly securityAlertsTopicArn?: string;
    readonly sessionRevocationTopicArn?: string;
    readonly autoRevokeOnReuse?: boolean;
    readonly jwtClaimsWhitelist?: string[];
    readonly hmacSecretRotationSchedule?: core.Duration;
    readonly auditLogRetentionDays?: number;
    readonly auditArchiveRetentionDays?: number;
    readonly removalPolicy?: core.RemovalPolicy;
}
export declare class AuthInfrastructure extends constructs.Construct {
    readonly configSecretArn: string;
    readonly kmsKeyArn: string;
    readonly authTableArn: string;
    readonly kvsArn: string;
    readonly tenantId: string;
    readonly clientId: string;
    readonly oauth2CallbackRoleName: string;
    readonly oidcProvider: iam.IOpenIdConnectProvider;
    constructor(scope: constructs.Construct, id: string, props: AuthInfrastructureProps);
}