import type { IPrincipal } from '../../../aws-iam';
/**
 * Returns true if the principal resolves to a Service principal in the policy document.
 * Checks the policyFragment output to handle wrapped principals
 * (e.g. PrincipalWithConditions, SessionTagsPrincipal).
 */
export declare function isServicePrincipal(principal: IPrincipal): boolean;
/**
 * Returns true if the principal is a service principal whose service name
 * is NOT in the known-valid allowlist for DynamoDB resource policies.
 */
export declare function isUnsupportedServicePrincipal(principal: IPrincipal): boolean;