feat(client-route53resolver): Release of FirewallDomainRedirectionAct…

…ion parameter on the Route 53 DNS Firewall Rule. This allows customers to configure a DNS Firewall rule to inspect all the domains in the DNS redirection chain (default) , such as CNAME, ALIAS, DNAME, etc., or just the first domain and trust the rest.
aws · Apr 30, 2024 · 6f5f3a1 · 6f5f3a1
1 parent fd01ffd
commit 6f5f3a1
Show file tree

Hide file tree

Showing 55 changed files with 243 additions and 6 deletions.
diff --git a/clients/client-route53resolver/src/commands/AssociateFirewallRuleGroupCommand.ts b/clients/client-route53resolver/src/commands/AssociateFirewallRuleGroupCommand.ts
@@ -78,6 +78,8 @@ export interface AssociateFirewallRuleGroupCommandOutput extends AssociateFirewa
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/AssociateResolverQueryLogConfigCommand.ts b/clients/client-route53resolver/src/commands/AssociateResolverQueryLogConfigCommand.ts
@@ -75,6 +75,8 @@ export interface AssociateResolverQueryLogConfigCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateFirewallDomainListCommand.ts b/clients/client-route53resolver/src/commands/CreateFirewallDomainListCommand.ts
@@ -71,6 +71,8 @@ export interface CreateFirewallDomainListCommandOutput extends CreateFirewallDom
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateFirewallRuleCommand.ts b/clients/client-route53resolver/src/commands/CreateFirewallRuleCommand.ts
@@ -45,6 +45,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
  *   BlockOverrideDnsType: "CNAME",
  *   BlockOverrideTtl: Number("int"),
  *   Name: "STRING_VALUE", // required
+ *   FirewallDomainRedirectionAction: "INSPECT_REDIRECTION_DOMAIN" || "TRUST_REDIRECTION_DOMAIN",
  *   Qtype: "STRING_VALUE",
  * };
  * const command = new CreateFirewallRuleCommand(input);
@@ -63,6 +64,7 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
  * //     CreatorRequestId: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",
  * //     ModificationTime: "STRING_VALUE",
+ * //     FirewallDomainRedirectionAction: "INSPECT_REDIRECTION_DOMAIN" || "TRUST_REDIRECTION_DOMAIN",
  * //     Qtype: "STRING_VALUE",
  * //   },
  * // };
@@ -77,6 +79,8 @@ export interface CreateFirewallRuleCommandOutput extends CreateFirewallRuleRespo
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateFirewallRuleGroupCommand.ts b/clients/client-route53resolver/src/commands/CreateFirewallRuleGroupCommand.ts
@@ -73,6 +73,8 @@ export interface CreateFirewallRuleGroupCommandOutput extends CreateFirewallRule
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateOutpostResolverCommand.ts b/clients/client-route53resolver/src/commands/CreateOutpostResolverCommand.ts
@@ -75,6 +75,8 @@ export interface CreateOutpostResolverCommandOutput extends CreateOutpostResolve
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateResolverEndpointCommand.ts b/clients/client-route53resolver/src/commands/CreateResolverEndpointCommand.ts
@@ -108,6 +108,8 @@ export interface CreateResolverEndpointCommandOutput extends CreateResolverEndpo
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateResolverQueryLogConfigCommand.ts b/clients/client-route53resolver/src/commands/CreateResolverQueryLogConfigCommand.ts
@@ -83,6 +83,8 @@ export interface CreateResolverQueryLogConfigCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/CreateResolverRuleCommand.ts b/clients/client-route53resolver/src/commands/CreateResolverRuleCommand.ts
@@ -94,6 +94,8 @@ export interface CreateResolverRuleCommandOutput extends CreateResolverRuleRespo
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/DeleteFirewallDomainListCommand.ts b/clients/client-route53resolver/src/commands/DeleteFirewallDomainListCommand.ts
@@ -64,6 +64,8 @@ export interface DeleteFirewallDomainListCommandOutput extends DeleteFirewallDom
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/DeleteFirewallRuleCommand.ts b/clients/client-route53resolver/src/commands/DeleteFirewallRuleCommand.ts
@@ -55,6 +55,7 @@ export interface DeleteFirewallRuleCommandOutput extends DeleteFirewallRuleRespo
  * //     CreatorRequestId: "STRING_VALUE",
  * //     CreationTime: "STRING_VALUE",
  * //     ModificationTime: "STRING_VALUE",
+ * //     FirewallDomainRedirectionAction: "INSPECT_REDIRECTION_DOMAIN" || "TRUST_REDIRECTION_DOMAIN",
  * //     Qtype: "STRING_VALUE",
  * //   },
  * // };
@@ -69,6 +70,8 @@ export interface DeleteFirewallRuleCommandOutput extends DeleteFirewallRuleRespo
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/DeleteFirewallRuleGroupCommand.ts b/clients/client-route53resolver/src/commands/DeleteFirewallRuleGroupCommand.ts
@@ -65,6 +65,8 @@ export interface DeleteFirewallRuleGroupCommandOutput extends DeleteFirewallRule
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/DeleteOutpostResolverCommand.ts b/clients/client-route53resolver/src/commands/DeleteOutpostResolverCommand.ts
@@ -65,6 +65,8 @@ export interface DeleteOutpostResolverCommandOutput extends DeleteOutpostResolve
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/DeleteResolverQueryLogConfigCommand.ts b/clients/client-route53resolver/src/commands/DeleteResolverQueryLogConfigCommand.ts
@@ -77,6 +77,8 @@ export interface DeleteResolverQueryLogConfigCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/DisassociateFirewallRuleGroupCommand.ts b/clients/client-route53resolver/src/commands/DisassociateFirewallRuleGroupCommand.ts
@@ -72,6 +72,8 @@ export interface DisassociateFirewallRuleGroupCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/DisassociateResolverQueryLogConfigCommand.ts b/clients/client-route53resolver/src/commands/DisassociateResolverQueryLogConfigCommand.ts
@@ -84,6 +84,8 @@ export interface DisassociateResolverQueryLogConfigCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetFirewallConfigCommand.ts b/clients/client-route53resolver/src/commands/GetFirewallConfigCommand.ts
@@ -59,6 +59,8 @@ export interface GetFirewallConfigCommandOutput extends GetFirewallConfigRespons
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetFirewallDomainListCommand.ts b/clients/client-route53resolver/src/commands/GetFirewallDomainListCommand.ts
@@ -64,6 +64,8 @@ export interface GetFirewallDomainListCommandOutput extends GetFirewallDomainLis
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetFirewallRuleGroupAssociationCommand.ts b/clients/client-route53resolver/src/commands/GetFirewallRuleGroupAssociationCommand.ts
@@ -72,6 +72,8 @@ export interface GetFirewallRuleGroupAssociationCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetFirewallRuleGroupCommand.ts b/clients/client-route53resolver/src/commands/GetFirewallRuleGroupCommand.ts
@@ -65,6 +65,8 @@ export interface GetFirewallRuleGroupCommandOutput extends GetFirewallRuleGroupR
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetFirewallRuleGroupPolicyCommand.ts b/clients/client-route53resolver/src/commands/GetFirewallRuleGroupPolicyCommand.ts
@@ -54,6 +54,8 @@ export interface GetFirewallRuleGroupPolicyCommandOutput extends GetFirewallRule
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetOutpostResolverCommand.ts b/clients/client-route53resolver/src/commands/GetOutpostResolverCommand.ts
@@ -66,6 +66,8 @@ export interface GetOutpostResolverCommandOutput extends GetOutpostResolverRespo
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverConfigCommand.ts b/clients/client-route53resolver/src/commands/GetResolverConfigCommand.ts
@@ -59,6 +59,8 @@ export interface GetResolverConfigCommandOutput extends GetResolverConfigRespons
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverDnssecConfigCommand.ts b/clients/client-route53resolver/src/commands/GetResolverDnssecConfigCommand.ts
@@ -58,6 +58,8 @@ export interface GetResolverDnssecConfigCommandOutput extends GetResolverDnssecC
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigAssociationCommand.ts b/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigAssociationCommand.ts
@@ -70,6 +70,8 @@ export interface GetResolverQueryLogConfigAssociationCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigCommand.ts b/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigCommand.ts
@@ -65,6 +65,8 @@ export interface GetResolverQueryLogConfigCommandOutput extends GetResolverQuery
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigPolicyCommand.ts b/clients/client-route53resolver/src/commands/GetResolverQueryLogConfigPolicyCommand.ts
@@ -59,6 +59,8 @@ export interface GetResolverQueryLogConfigPolicyCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/GetResolverRulePolicyCommand.ts b/clients/client-route53resolver/src/commands/GetResolverRulePolicyCommand.ts
@@ -54,6 +54,8 @@ export interface GetResolverRulePolicyCommandOutput extends GetResolverRulePolic
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/ImportFirewallDomainsCommand.ts b/clients/client-route53resolver/src/commands/ImportFirewallDomainsCommand.ts
@@ -73,6 +73,8 @@ export interface ImportFirewallDomainsCommandOutput extends ImportFirewallDomain
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link ConflictException} (client fault)
  *  <p>The requested state transition isn't valid. For example, you can't delete a firewall

diff --git a/clients/client-route53resolver/src/commands/ListFirewallConfigsCommand.ts b/clients/client-route53resolver/src/commands/ListFirewallConfigsCommand.ts
@@ -63,6 +63,8 @@ export interface ListFirewallConfigsCommandOutput extends ListFirewallConfigsRes
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/ListFirewallDomainListsCommand.ts b/clients/client-route53resolver/src/commands/ListFirewallDomainListsCommand.ts
@@ -64,6 +64,8 @@ export interface ListFirewallDomainListsCommandOutput extends ListFirewallDomain
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/ListFirewallDomainsCommand.ts b/clients/client-route53resolver/src/commands/ListFirewallDomainsCommand.ts
@@ -59,6 +59,8 @@ export interface ListFirewallDomainsCommandOutput extends ListFirewallDomainsRes
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>

diff --git a/clients/client-route53resolver/src/commands/ListFirewallRuleGroupAssociationsCommand.ts b/clients/client-route53resolver/src/commands/ListFirewallRuleGroupAssociationsCommand.ts
@@ -84,6 +84,8 @@ export interface ListFirewallRuleGroupAssociationsCommandOutput
  *
  * @throws {@link AccessDeniedException} (client fault)
  *  <p>The current account doesn't have the IAM permissions required to perform the specified Resolver operation.</p>
+ *          <p>This error can also be thrown when a customer has reached the 5120 character limit for a
+ * 			resource policy for CloudWatch Logs.</p>
  *
  * @throws {@link InternalServiceErrorException} (client fault)
  *  <p>We encountered an unknown error. Try again in a few minutes.</p>