/**
 * Built-in Security Policies
 *
 * Pre-configured security policies for common use cases:
 * - Require MFA for admin access
 * - Block access from high-risk IPs
 * - Require approval for bulk data export
 * - Enhanced logging for sensitive resources
 * - Rate limit by user risk score
 *
 * @packageDocumentation
 */
import type { SecurityPolicy } from './types.js';
/**
 * Require MFA for admin access
 *
 * When a user with admin role accesses any endpoint, they must have
 * completed MFA verification within the last 5 minutes.
 */
export declare const requireMfaForAdminPolicy: SecurityPolicy;
/**
 * Block access from high-risk IPs
 *
 * Blocks requests from IPs with a reputation score below 30.
 * Also notifies the security team.
 */
export declare const blockHighRiskIpsPolicy: SecurityPolicy;
/**
 * Require approval for bulk data export
 *
 * When a user attempts to export more than 1000 records,
 * require manager approval before proceeding.
 */
export declare const requireApprovalForBulkExportPolicy: SecurityPolicy;
/**
 * Enhanced logging for sensitive resources
 *
 * When accessing resources with confidential or higher sensitivity,
 * enable detailed audit logging.
 */
export declare const enhancedLoggingForSensitiveResourcesPolicy: SecurityPolicy;
/**
 * Rate limit by user risk score
 *
 * Users with higher risk scores get lower rate limits.
 */
export declare const rateLimitByRiskScorePolicy: SecurityPolicy;
/**
 * Require MFA outside business hours
 *
 * Additional verification required for access outside normal working hours.
 */
export declare const mfaOutsideBusinessHoursPolicy: SecurityPolicy;
/**
 * Block requests with critical threat level
 *
 * Immediately block any request with critical threat assessment.
 */
export declare const blockCriticalThreatsPolicy: SecurityPolicy;
/**
 * Geo-restrict sensitive operations
 *
 * Sensitive operations only allowed from approved countries.
 */
export declare const geoRestrictSensitiveOperationsPolicy: SecurityPolicy;
/**
 * Session security for high-risk users
 *
 * Shorter session timeouts for users with elevated risk scores.
 */
export declare const sessionSecurityHighRiskUsersPolicy: SecurityPolicy;
/**
 * Data masking for PII fields
 *
 * Automatically mask PII fields in responses for non-privileged users.
 */
export declare const dataMaskingForPiiPolicy: SecurityPolicy;
/**
 * All built-in policies
 */
export declare const builtInPolicies: SecurityPolicy[];
/**
 * Get built-in policies by tags
 */
export declare function getBuiltInPoliciesByTag(tag: string): SecurityPolicy[];
/**
 * Get all built-in policy IDs
 */
export declare function getBuiltInPolicyIds(): string[];
//# sourceMappingURL=built-in-policies.d.ts.map