import { PolicyDocument } from 'aws-cdk-lib/aws-iam';
import { IAccessSpec } from './k9policy';
export interface K9DynamoDBResourcePolicyProps {
    readonly k9DesiredAccess: Array<IAccessSpec>;
}
export declare const SID_DENY_EVERYONE_ELSE = "DenyEveryoneElse";
/**
 * Generate a DynamoDB resource policy from the provided props that can be attached to DynamoDB
 * resources, particularly tables & indices.
 *
 * @param props specifying desired access
 * @return a PolicyDocument that can be attached to DynamoDB resources
 */
export declare function makeResourcePolicy(props: K9DynamoDBResourcePolicyProps): PolicyDocument;