@aws-sdk/client-cloudfront 3.154.0 → 3.157.0

package/dist-es/protocols/Aws_restXml.js

@@ -5,8 +5,8 @@ import { XmlNode as __XmlNode } from "@aws-sdk/xml-builder";
 import { decodeHTML } from "entities";
 import { parse as xmlParse } from "fast-xml-parser";
 import { CloudFrontServiceException as __BaseException } from "../models/CloudFrontServiceException";
-import { AccessDenied, BatchTooLarge, CachePolicyAlreadyExists, CachePolicyInUse, CannotChangeImmutablePublicKeyFields, CloudFrontOriginAccessIdentityAlreadyExists, CloudFrontOriginAccessIdentityInUse, CNAMEAlreadyExists, DistributionAlreadyExists, DistributionNotDisabled, FieldLevelEncryptionConfigAlreadyExists, FieldLevelEncryptionConfigInUse, FieldLevelEncryptionProfileAlreadyExists, FieldLevelEncryptionProfileInUse, FieldLevelEncryptionProfileSizeExceeded, FunctionAlreadyExists, FunctionInUse, FunctionSizeLimitExceeded, IllegalDelete, IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior, IllegalUpdate, InconsistentQuantities, InvalidArgument, InvalidDefaultRootObject, InvalidErrorCode, InvalidForwardCookies, InvalidFunctionAssociation, InvalidGeoRestrictionParameter, InvalidHeadersForS3Origin, InvalidIfMatchVersion, InvalidLambdaFunctionAssociation, InvalidLocationCode, InvalidMinimumProtocolVersion, InvalidOrigin, InvalidOriginAccessIdentity, InvalidOriginKeepaliveTimeout, InvalidOriginReadTimeout, InvalidProtocolSettings, InvalidQueryStringParameters, InvalidRelativePath, InvalidRequiredProtocol, InvalidResponseCode, InvalidTagging, InvalidTTLOrder, InvalidViewerCertificate, InvalidWebACLId, KeyGroupAlreadyExists, MissingBody, NoSuchCachePolicy, NoSuchCloudFrontOriginAccessIdentity, NoSuchDistribution, NoSuchFieldLevelEncryptionConfig, NoSuchFieldLevelEncryptionProfile, NoSuchFunctionExists, NoSuchOrigin, NoSuchOriginRequestPolicy, NoSuchPublicKey, NoSuchRealtimeLogConfig, NoSuchResource, NoSuchResponseHeadersPolicy, OriginRequestPolicyAlreadyExists, PreconditionFailed, PublicKeyAlreadyExists, QueryArgProfileEmpty, RealtimeLogConfigAlreadyExists, RealtimeLogConfigOwnerMismatch, ResponseHeadersPolicyAlreadyExists, StreamingDistributionAlreadyExists, TooLongCSPInResponseHeadersPolicy, TooManyCacheBehaviors, TooManyCachePolicies, TooManyCertificates, TooManyCloudFrontOriginAccessIdentities, TooManyCookieNamesInWhiteList, TooManyCookiesInCachePolicy, TooManyCookiesInOriginRequestPolicy, TooManyCustomHeadersInResponseHeadersPolicy, TooManyDistributionCNAMEs, TooManyDistributions, TooManyDistributionsAssociatedToCachePolicy, TooManyDistributionsAssociatedToFieldLevelEncryptionConfig, TooManyDistributionsAssociatedToKeyGroup, TooManyDistributionsAssociatedToOriginRequestPolicy, TooManyDistributionsAssociatedToResponseHeadersPolicy, TooManyDistributionsWithFunctionAssociations, TooManyDistributionsWithLambdaAssociations, TooManyDistributionsWithSingleFunctionARN, TooManyFieldLevelEncryptionConfigs, TooManyFieldLevelEncryptionContentTypeProfiles, TooManyFieldLevelEncryptionEncryptionEntities, TooManyFieldLevelEncryptionFieldPatterns, TooManyFieldLevelEncryptionProfiles, TooManyFieldLevelEncryptionQueryArgProfiles, TooManyFunctionAssociations, TooManyFunctions, TooManyHeadersInCachePolicy, TooManyHeadersInForwardedValues, TooManyHeadersInOriginRequestPolicy, TooManyInvalidationsInProgress, TooManyKeyGroups, TooManyKeyGroupsAssociatedToDistribution, TooManyLambdaFunctionAssociations, TooManyOriginCustomHeaders, TooManyOriginGroupsPerDistribution, TooManyOriginRequestPolicies, TooManyOrigins, TooManyPublicKeys, TooManyPublicKeysInKeyGroup, TooManyQueryStringParameters, TooManyQueryStringsInCachePolicy, TooManyQueryStringsInOriginRequestPolicy, TooManyRealtimeLogConfigs, TooManyResponseHeadersPolicies, TooManyStreamingDistributionCNAMEs, TooManyStreamingDistributions, TooManyTrustedSigners, TrustedKeyGroupDoesNotExist, TrustedSignerDoesNotExist, UnsupportedOperation, } from "../models/models_0";
-import { NoSuchInvalidation, NoSuchStreamingDistribution, OriginRequestPolicyInUse, PublicKeyInUse, RealtimeLogConfigInUse, ResourceInUse, ResponseHeadersPolicyInUse, StreamingDistributionNotDisabled, TestFunctionFailed, } from "../models/models_1";
+import { AccessDenied, BatchTooLarge, CachePolicyAlreadyExists, CachePolicyInUse, CannotChangeImmutablePublicKeyFields, CloudFrontOriginAccessIdentityAlreadyExists, CNAMEAlreadyExists, DistributionAlreadyExists, FieldLevelEncryptionConfigAlreadyExists, FieldLevelEncryptionProfileAlreadyExists, FieldLevelEncryptionProfileSizeExceeded, FunctionAlreadyExists, FunctionSizeLimitExceeded, IllegalDelete, IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior, IllegalOriginAccessConfiguration, IllegalUpdate, InconsistentQuantities, InvalidArgument, InvalidDefaultRootObject, InvalidDomainNameForOriginAccessControl, InvalidErrorCode, InvalidForwardCookies, InvalidFunctionAssociation, InvalidGeoRestrictionParameter, InvalidHeadersForS3Origin, InvalidIfMatchVersion, InvalidLambdaFunctionAssociation, InvalidLocationCode, InvalidMinimumProtocolVersion, InvalidOrigin, InvalidOriginAccessControl, InvalidOriginAccessIdentity, InvalidOriginKeepaliveTimeout, InvalidOriginReadTimeout, InvalidProtocolSettings, InvalidQueryStringParameters, InvalidRelativePath, InvalidRequiredProtocol, InvalidResponseCode, InvalidTagging, InvalidTTLOrder, InvalidViewerCertificate, InvalidWebACLId, KeyGroupAlreadyExists, MissingBody, MonitoringSubscriptionAlreadyExists, NoSuchCachePolicy, NoSuchDistribution, NoSuchFieldLevelEncryptionConfig, NoSuchFieldLevelEncryptionProfile, NoSuchOrigin, NoSuchOriginRequestPolicy, NoSuchPublicKey, NoSuchRealtimeLogConfig, NoSuchResponseHeadersPolicy, OriginAccessControlAlreadyExists, OriginRequestPolicyAlreadyExists, PreconditionFailed, PublicKeyAlreadyExists, QueryArgProfileEmpty, RealtimeLogConfigAlreadyExists, RealtimeLogConfigOwnerMismatch, ResponseHeadersPolicyAlreadyExists, StreamingDistributionAlreadyExists, TooLongCSPInResponseHeadersPolicy, TooManyCacheBehaviors, TooManyCachePolicies, TooManyCertificates, TooManyCloudFrontOriginAccessIdentities, TooManyCookieNamesInWhiteList, TooManyCookiesInCachePolicy, TooManyCookiesInOriginRequestPolicy, TooManyCustomHeadersInResponseHeadersPolicy, TooManyDistributionCNAMEs, TooManyDistributions, TooManyDistributionsAssociatedToCachePolicy, TooManyDistributionsAssociatedToFieldLevelEncryptionConfig, TooManyDistributionsAssociatedToKeyGroup, TooManyDistributionsAssociatedToOriginAccessControl, TooManyDistributionsAssociatedToOriginRequestPolicy, TooManyDistributionsAssociatedToResponseHeadersPolicy, TooManyDistributionsWithFunctionAssociations, TooManyDistributionsWithLambdaAssociations, TooManyDistributionsWithSingleFunctionARN, TooManyFieldLevelEncryptionConfigs, TooManyFieldLevelEncryptionContentTypeProfiles, TooManyFieldLevelEncryptionEncryptionEntities, TooManyFieldLevelEncryptionFieldPatterns, TooManyFieldLevelEncryptionProfiles, TooManyFieldLevelEncryptionQueryArgProfiles, TooManyFunctionAssociations, TooManyFunctions, TooManyHeadersInCachePolicy, TooManyHeadersInForwardedValues, TooManyHeadersInOriginRequestPolicy, TooManyInvalidationsInProgress, TooManyKeyGroups, TooManyKeyGroupsAssociatedToDistribution, TooManyLambdaFunctionAssociations, TooManyOriginAccessControls, TooManyOriginCustomHeaders, TooManyOriginGroupsPerDistribution, TooManyOriginRequestPolicies, TooManyOrigins, TooManyPublicKeys, TooManyPublicKeysInKeyGroup, TooManyQueryStringParameters, TooManyQueryStringsInCachePolicy, TooManyQueryStringsInOriginRequestPolicy, TooManyRealtimeLogConfigs, TooManyResponseHeadersPolicies, TooManyStreamingDistributionCNAMEs, TooManyStreamingDistributions, TooManyTrustedSigners, TrustedKeyGroupDoesNotExist, TrustedSignerDoesNotExist, UnsupportedOperation, } from "../models/models_0";
+import { CloudFrontOriginAccessIdentityInUse, DistributionNotDisabled, FieldLevelEncryptionConfigInUse, FieldLevelEncryptionProfileInUse, FunctionInUse, NoSuchCloudFrontOriginAccessIdentity, NoSuchFunctionExists, NoSuchInvalidation, NoSuchMonitoringSubscription, NoSuchOriginAccessControl, NoSuchResource, NoSuchStreamingDistribution, OriginAccessControlInUse, OriginRequestPolicyInUse, PublicKeyInUse, RealtimeLogConfigInUse, ResourceInUse, ResponseHeadersPolicyInUse, StreamingDistributionNotDisabled, TestFunctionFailed, } from "../models/models_1";
 export var serializeAws_restXmlAssociateAliasCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, query, body;
     return __generator(this, function (_c) {
@@ -371,6 +371,38 @@ export var serializeAws_restXmlCreateMonitoringSubscriptionCommand = function (i
         }
     });
 }); };
+export var serializeAws_restXmlCreateOriginAccessControlCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body, contents;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = {
+                    "content-type": "application/xml",
+                };
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") + "/2020-05-31/origin-access-control";
+                if (input.OriginAccessControlConfig !== undefined) {
+                    body = serializeAws_restXmlOriginAccessControlConfig(input.OriginAccessControlConfig, context);
+                }
+                if (input.OriginAccessControlConfig !== undefined) {
+                    contents = serializeAws_restXmlOriginAccessControlConfig(input.OriginAccessControlConfig, context);
+                    body = '<?xml version="1.0" encoding="UTF-8"?>';
+                    contents.addAttribute("xmlns", "http://cloudfront.amazonaws.com/doc/2020-05-31/");
+                    body += contents.toString();
+                }
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "POST",
+                        headers: headers,
+                        path: resolvedPath,
+                        body: body,
+                    })];
+        }
+    });
+}); };
 export var serializeAws_restXmlCreateOriginRequestPolicyCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body, contents;
     return __generator(this, function (_c) {
@@ -779,6 +811,30 @@ export var serializeAws_restXmlDeleteMonitoringSubscriptionCommand = function (i
         }
     });
 }); };
+export var serializeAws_restXmlDeleteOriginAccessControlCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = map({}, isSerializableHeaderValue, {
+                    "if-match": input.IfMatch,
+                });
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") + "/2020-05-31/origin-access-control/{Id}";
+                resolvedPath = __resolvedPath(resolvedPath, input, "Id", function () { return input.Id; }, "{Id}", false);
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "DELETE",
+                        headers: headers,
+                        path: resolvedPath,
+                        body: body,
+                    })];
+        }
+    });
+}); };
 export var serializeAws_restXmlDeleteOriginRequestPolicyCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body;
     return __generator(this, function (_c) {
@@ -1278,6 +1334,51 @@ export var serializeAws_restXmlGetMonitoringSubscriptionCommand = function (inpu
         }
     });
 }); };
+export var serializeAws_restXmlGetOriginAccessControlCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = {};
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") + "/2020-05-31/origin-access-control/{Id}";
+                resolvedPath = __resolvedPath(resolvedPath, input, "Id", function () { return input.Id; }, "{Id}", false);
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "GET",
+                        headers: headers,
+                        path: resolvedPath,
+                        body: body,
+                    })];
+        }
+    });
+}); };
+export var serializeAws_restXmlGetOriginAccessControlConfigCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = {};
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") +
+                    "/2020-05-31/origin-access-control/{Id}/config";
+                resolvedPath = __resolvedPath(resolvedPath, input, "Id", function () { return input.Id; }, "{Id}", false);
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "GET",
+                        headers: headers,
+                        path: resolvedPath,
+                        body: body,
+                    })];
+        }
+    });
+}); };
 export var serializeAws_restXmlGetOriginRequestPolicyCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body;
     return __generator(this, function (_c) {
@@ -1918,6 +2019,32 @@ export var serializeAws_restXmlListKeyGroupsCommand = function (input, context)
         }
     });
 }); };
+export var serializeAws_restXmlListOriginAccessControlsCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, query, body;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = {};
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") + "/2020-05-31/origin-access-control";
+                query = map({
+                    Marker: [, input.Marker],
+                    MaxItems: [function () { return input.MaxItems !== void 0; }, function () { return input.MaxItems.toString(); }],
+                });
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "GET",
+                        headers: headers,
+                        path: resolvedPath,
+                        query: query,
+                        body: body,
+                    })];
+        }
+    });
+}); };
 export var serializeAws_restXmlListOriginRequestPoliciesCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, query, body;
     return __generator(this, function (_c) {
@@ -2454,6 +2581,41 @@ export var serializeAws_restXmlUpdateKeyGroupCommand = function (input, context)
         }
     });
 }); };
+export var serializeAws_restXmlUpdateOriginAccessControlCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body, contents;
+    return __generator(this, function (_c) {
+        switch (_c.label) {
+            case 0: return [4, context.endpoint()];
+            case 1:
+                _a = _c.sent(), hostname = _a.hostname, _b = _a.protocol, protocol = _b === void 0 ? "https" : _b, port = _a.port, basePath = _a.path;
+                headers = map({}, isSerializableHeaderValue, {
+                    "content-type": "application/xml",
+                    "if-match": input.IfMatch,
+                });
+                resolvedPath = "".concat((basePath === null || basePath === void 0 ? void 0 : basePath.endsWith("/")) ? basePath.slice(0, -1) : basePath || "") +
+                    "/2020-05-31/origin-access-control/{Id}/config";
+                resolvedPath = __resolvedPath(resolvedPath, input, "Id", function () { return input.Id; }, "{Id}", false);
+                if (input.OriginAccessControlConfig !== undefined) {
+                    body = serializeAws_restXmlOriginAccessControlConfig(input.OriginAccessControlConfig, context);
+                }
+                if (input.OriginAccessControlConfig !== undefined) {
+                    contents = serializeAws_restXmlOriginAccessControlConfig(input.OriginAccessControlConfig, context);
+                    body = '<?xml version="1.0" encoding="UTF-8"?>';
+                    contents.addAttribute("xmlns", "http://cloudfront.amazonaws.com/doc/2020-05-31/");
+                    body += contents.toString();
+                }
+                return [2, new __HttpRequest({
+                        protocol: protocol,
+                        hostname: hostname,
+                        port: port,
+                        method: "PUT",
+                        headers: headers,
+                        path: resolvedPath,
+                        body: body,
+                    })];
+        }
+    });
+}); };
 export var serializeAws_restXmlUpdateOriginRequestPolicyCommand = function (input, context) { return __awaiter(void 0, void 0, void 0, function () {
     var _a, hostname, _b, protocol, port, basePath, headers, resolvedPath, body, contents;
     return __generator(this, function (_c) {
@@ -2911,118 +3073,126 @@ var deserializeAws_restXmlCreateDistributionCommandError = function (output, con
                     case "com.amazonaws.cloudfront#DistributionAlreadyExists": return [3, 6];
                     case "IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior": return [3, 8];
                     case "com.amazonaws.cloudfront#IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior": return [3, 8];
-                    case "InconsistentQuantities": return [3, 10];
-                    case "com.amazonaws.cloudfront#InconsistentQuantities": return [3, 10];
-                    case "InvalidArgument": return [3, 12];
-                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 12];
-                    case "InvalidDefaultRootObject": return [3, 14];
-                    case "com.amazonaws.cloudfront#InvalidDefaultRootObject": return [3, 14];
-                    case "InvalidErrorCode": return [3, 16];
-                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 16];
-                    case "InvalidForwardCookies": return [3, 18];
-                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 18];
-                    case "InvalidFunctionAssociation": return [3, 20];
-                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 20];
-                    case "InvalidGeoRestrictionParameter": return [3, 22];
-                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 22];
-                    case "InvalidHeadersForS3Origin": return [3, 24];
-                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 24];
-                    case "InvalidLambdaFunctionAssociation": return [3, 26];
-                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 26];
-                    case "InvalidLocationCode": return [3, 28];
-                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 28];
-                    case "InvalidMinimumProtocolVersion": return [3, 30];
-                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 30];
-                    case "InvalidOrigin": return [3, 32];
-                    case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 32];
-                    case "InvalidOriginAccessIdentity": return [3, 34];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 34];
-                    case "InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "InvalidOriginReadTimeout": return [3, 38];
-                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 38];
-                    case "InvalidProtocolSettings": return [3, 40];
-                    case "com.amazonaws.cloudfront#InvalidProtocolSettings": return [3, 40];
-                    case "InvalidQueryStringParameters": return [3, 42];
-                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 42];
-                    case "InvalidRelativePath": return [3, 44];
-                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 44];
-                    case "InvalidRequiredProtocol": return [3, 46];
-                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 46];
-                    case "InvalidResponseCode": return [3, 48];
-                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 48];
-                    case "InvalidTTLOrder": return [3, 50];
-                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 50];
-                    case "InvalidViewerCertificate": return [3, 52];
-                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 52];
-                    case "InvalidWebACLId": return [3, 54];
-                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 54];
-                    case "MissingBody": return [3, 56];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 56];
-                    case "NoSuchCachePolicy": return [3, 58];
-                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 58];
-                    case "NoSuchFieldLevelEncryptionConfig": return [3, 60];
-                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 60];
-                    case "NoSuchOrigin": return [3, 62];
-                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 62];
-                    case "NoSuchOriginRequestPolicy": return [3, 64];
-                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 64];
-                    case "NoSuchRealtimeLogConfig": return [3, 66];
-                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 66];
-                    case "NoSuchResponseHeadersPolicy": return [3, 68];
-                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 68];
-                    case "RealtimeLogConfigOwnerMismatch": return [3, 70];
-                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 70];
-                    case "TooManyCacheBehaviors": return [3, 72];
-                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 72];
-                    case "TooManyCertificates": return [3, 74];
-                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 74];
-                    case "TooManyCookieNamesInWhiteList": return [3, 76];
-                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 76];
-                    case "TooManyDistributionCNAMEs": return [3, 78];
-                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 78];
-                    case "TooManyDistributions": return [3, 80];
-                    case "com.amazonaws.cloudfront#TooManyDistributions": return [3, 80];
-                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 82];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 82];
-                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 84];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 84];
-                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 86];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 86];
-                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 88];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 88];
-                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 90];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 90];
-                    case "TooManyDistributionsWithFunctionAssociations": return [3, 92];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 92];
-                    case "TooManyDistributionsWithLambdaAssociations": return [3, 94];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 94];
-                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 96];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 96];
-                    case "TooManyFunctionAssociations": return [3, 98];
-                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 98];
-                    case "TooManyHeadersInForwardedValues": return [3, 100];
-                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 100];
-                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 102];
-                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 102];
-                    case "TooManyLambdaFunctionAssociations": return [3, 104];
-                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 104];
-                    case "TooManyOriginCustomHeaders": return [3, 106];
-                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 106];
-                    case "TooManyOriginGroupsPerDistribution": return [3, 108];
-                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 108];
-                    case "TooManyOrigins": return [3, 110];
-                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 110];
-                    case "TooManyQueryStringParameters": return [3, 112];
-                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 112];
-                    case "TooManyTrustedSigners": return [3, 114];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 114];
-                    case "TrustedKeyGroupDoesNotExist": return [3, 116];
-                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 116];
-                    case "TrustedSignerDoesNotExist": return [3, 118];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 118];
-                }
-                return [3, 120];
+                    case "IllegalOriginAccessConfiguration": return [3, 10];
+                    case "com.amazonaws.cloudfront#IllegalOriginAccessConfiguration": return [3, 10];
+                    case "InconsistentQuantities": return [3, 12];
+                    case "com.amazonaws.cloudfront#InconsistentQuantities": return [3, 12];
+                    case "InvalidArgument": return [3, 14];
+                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 14];
+                    case "InvalidDefaultRootObject": return [3, 16];
+                    case "com.amazonaws.cloudfront#InvalidDefaultRootObject": return [3, 16];
+                    case "InvalidDomainNameForOriginAccessControl": return [3, 18];
+                    case "com.amazonaws.cloudfront#InvalidDomainNameForOriginAccessControl": return [3, 18];
+                    case "InvalidErrorCode": return [3, 20];
+                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 20];
+                    case "InvalidForwardCookies": return [3, 22];
+                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 22];
+                    case "InvalidFunctionAssociation": return [3, 24];
+                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 24];
+                    case "InvalidGeoRestrictionParameter": return [3, 26];
+                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 26];
+                    case "InvalidHeadersForS3Origin": return [3, 28];
+                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 28];
+                    case "InvalidLambdaFunctionAssociation": return [3, 30];
+                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 30];
+                    case "InvalidLocationCode": return [3, 32];
+                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 32];
+                    case "InvalidMinimumProtocolVersion": return [3, 34];
+                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 34];
+                    case "InvalidOrigin": return [3, 36];
+                    case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 36];
+                    case "InvalidOriginAccessControl": return [3, 38];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 38];
+                    case "InvalidOriginAccessIdentity": return [3, 40];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 40];
+                    case "InvalidOriginKeepaliveTimeout": return [3, 42];
+                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 42];
+                    case "InvalidOriginReadTimeout": return [3, 44];
+                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 44];
+                    case "InvalidProtocolSettings": return [3, 46];
+                    case "com.amazonaws.cloudfront#InvalidProtocolSettings": return [3, 46];
+                    case "InvalidQueryStringParameters": return [3, 48];
+                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 48];
+                    case "InvalidRelativePath": return [3, 50];
+                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 50];
+                    case "InvalidRequiredProtocol": return [3, 52];
+                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 52];
+                    case "InvalidResponseCode": return [3, 54];
+                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 54];
+                    case "InvalidTTLOrder": return [3, 56];
+                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 56];
+                    case "InvalidViewerCertificate": return [3, 58];
+                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 58];
+                    case "InvalidWebACLId": return [3, 60];
+                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 60];
+                    case "MissingBody": return [3, 62];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 62];
+                    case "NoSuchCachePolicy": return [3, 64];
+                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 64];
+                    case "NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "NoSuchOrigin": return [3, 68];
+                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 68];
+                    case "NoSuchOriginRequestPolicy": return [3, 70];
+                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 70];
+                    case "NoSuchRealtimeLogConfig": return [3, 72];
+                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 72];
+                    case "NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "RealtimeLogConfigOwnerMismatch": return [3, 76];
+                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 76];
+                    case "TooManyCacheBehaviors": return [3, 78];
+                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 78];
+                    case "TooManyCertificates": return [3, 80];
+                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 80];
+                    case "TooManyCookieNamesInWhiteList": return [3, 82];
+                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 82];
+                    case "TooManyDistributionCNAMEs": return [3, 84];
+                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 84];
+                    case "TooManyDistributions": return [3, 86];
+                    case "com.amazonaws.cloudfront#TooManyDistributions": return [3, 86];
+                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "TooManyDistributionsAssociatedToOriginAccessControl": return [3, 94];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginAccessControl": return [3, 94];
+                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 96];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 96];
+                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 98];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 98];
+                    case "TooManyDistributionsWithFunctionAssociations": return [3, 100];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 100];
+                    case "TooManyDistributionsWithLambdaAssociations": return [3, 102];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 102];
+                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 104];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 104];
+                    case "TooManyFunctionAssociations": return [3, 106];
+                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 106];
+                    case "TooManyHeadersInForwardedValues": return [3, 108];
+                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 108];
+                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 110];
+                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 110];
+                    case "TooManyLambdaFunctionAssociations": return [3, 112];
+                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 112];
+                    case "TooManyOriginCustomHeaders": return [3, 114];
+                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 114];
+                    case "TooManyOriginGroupsPerDistribution": return [3, 116];
+                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 116];
+                    case "TooManyOrigins": return [3, 118];
+                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 118];
+                    case "TooManyQueryStringParameters": return [3, 120];
+                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 120];
+                    case "TooManyTrustedSigners": return [3, 122];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 122];
+                    case "TrustedKeyGroupDoesNotExist": return [3, 124];
+                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 124];
+                    case "TrustedSignerDoesNotExist": return [3, 126];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 126];
+                }
+                return [3, 128];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
@@ -3031,117 +3201,125 @@ var deserializeAws_restXmlCreateDistributionCommandError = function (output, con
             case 7: throw _d.sent();
             case 8: return [4, deserializeAws_restXmlIllegalFieldLevelEncryptionConfigAssociationWithCacheBehaviorResponse(parsedOutput, context)];
             case 9: throw _d.sent();
-            case 10: return [4, deserializeAws_restXmlInconsistentQuantitiesResponse(parsedOutput, context)];
+            case 10: return [4, deserializeAws_restXmlIllegalOriginAccessConfigurationResponse(parsedOutput, context)];
             case 11: throw _d.sent();
-            case 12: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+            case 12: return [4, deserializeAws_restXmlInconsistentQuantitiesResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14: return [4, deserializeAws_restXmlInvalidDefaultRootObjectResponse(parsedOutput, context)];
+            case 14: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlInvalidDefaultRootObjectResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlInvalidDomainNameForOriginAccessControlResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
+            case 26: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
             case 27: throw _d.sent();
-            case 28: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
+            case 28: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
             case 29: throw _d.sent();
-            case 30: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
+            case 30: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
             case 31: throw _d.sent();
-            case 32: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
+            case 32: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
             case 33: throw _d.sent();
-            case 34: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 34: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
             case 35: throw _d.sent();
-            case 36: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
+            case 36: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
             case 37: throw _d.sent();
-            case 38: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
+            case 38: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 39: throw _d.sent();
-            case 40: return [4, deserializeAws_restXmlInvalidProtocolSettingsResponse(parsedOutput, context)];
+            case 40: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 41: throw _d.sent();
-            case 42: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
+            case 42: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
             case 43: throw _d.sent();
-            case 44: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
+            case 44: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
             case 45: throw _d.sent();
-            case 46: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
+            case 46: return [4, deserializeAws_restXmlInvalidProtocolSettingsResponse(parsedOutput, context)];
             case 47: throw _d.sent();
-            case 48: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
+            case 48: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
             case 49: throw _d.sent();
-            case 50: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
+            case 50: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
             case 51: throw _d.sent();
-            case 52: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
+            case 52: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
             case 53: throw _d.sent();
-            case 54: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
+            case 54: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
             case 55: throw _d.sent();
-            case 56: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 56: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
             case 57: throw _d.sent();
-            case 58: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
+            case 58: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
             case 59: throw _d.sent();
-            case 60: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 60: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
             case 61: throw _d.sent();
-            case 62: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
+            case 62: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 63: throw _d.sent();
-            case 64: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
+            case 64: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
             case 65: throw _d.sent();
-            case 66: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
+            case 66: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 67: throw _d.sent();
-            case 68: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 68: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
             case 69: throw _d.sent();
-            case 70: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
+            case 70: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
             case 71: throw _d.sent();
-            case 72: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
+            case 72: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
             case 73: throw _d.sent();
-            case 74: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
+            case 74: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
             case 75: throw _d.sent();
-            case 76: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
+            case 76: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
             case 77: throw _d.sent();
-            case 78: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
+            case 78: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
             case 79: throw _d.sent();
-            case 80: return [4, deserializeAws_restXmlTooManyDistributionsResponse(parsedOutput, context)];
+            case 80: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
             case 81: throw _d.sent();
-            case 82: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
+            case 82: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
             case 83: throw _d.sent();
-            case 84: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 84: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
             case 85: throw _d.sent();
-            case 86: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
+            case 86: return [4, deserializeAws_restXmlTooManyDistributionsResponse(parsedOutput, context)];
             case 87: throw _d.sent();
-            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
+            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
             case 89: throw _d.sent();
-            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 91: throw _d.sent();
-            case 92: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
+            case 92: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
             case 93: throw _d.sent();
-            case 94: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
+            case 94: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginAccessControlResponse(parsedOutput, context)];
             case 95: throw _d.sent();
-            case 96: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
+            case 96: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
             case 97: throw _d.sent();
-            case 98: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
+            case 98: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
             case 99: throw _d.sent();
-            case 100: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
+            case 100: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
             case 101: throw _d.sent();
-            case 102: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
+            case 102: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
             case 103: throw _d.sent();
-            case 104: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
+            case 104: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
             case 105: throw _d.sent();
-            case 106: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
+            case 106: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
             case 107: throw _d.sent();
-            case 108: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
+            case 108: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
             case 109: throw _d.sent();
-            case 110: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
+            case 110: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
             case 111: throw _d.sent();
-            case 112: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
+            case 112: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
             case 113: throw _d.sent();
-            case 114: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 114: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
             case 115: throw _d.sent();
-            case 116: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 116: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
             case 117: throw _d.sent();
-            case 118: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 118: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
             case 119: throw _d.sent();
-            case 120:
+            case 120: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
+            case 121: throw _d.sent();
+            case 122: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 123: throw _d.sent();
+            case 124: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 125: throw _d.sent();
+            case 126: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 127: throw _d.sent();
+            case 128:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -3149,8 +3327,8 @@ var deserializeAws_restXmlCreateDistributionCommandError = function (output, con
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 121;
-            case 121: return [2];
+                _d.label = 129;
+            case 129: return [2];
         }
     });
 }); };
@@ -3204,114 +3382,118 @@ var deserializeAws_restXmlCreateDistributionWithTagsCommandError = function (out
                     case "com.amazonaws.cloudfront#InvalidArgument": return [3, 12];
                     case "InvalidDefaultRootObject": return [3, 14];
                     case "com.amazonaws.cloudfront#InvalidDefaultRootObject": return [3, 14];
-                    case "InvalidErrorCode": return [3, 16];
-                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 16];
-                    case "InvalidForwardCookies": return [3, 18];
-                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 18];
-                    case "InvalidFunctionAssociation": return [3, 20];
-                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 20];
-                    case "InvalidGeoRestrictionParameter": return [3, 22];
-                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 22];
-                    case "InvalidHeadersForS3Origin": return [3, 24];
-                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 24];
-                    case "InvalidLambdaFunctionAssociation": return [3, 26];
-                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 26];
-                    case "InvalidLocationCode": return [3, 28];
-                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 28];
-                    case "InvalidMinimumProtocolVersion": return [3, 30];
-                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 30];
-                    case "InvalidOrigin": return [3, 32];
-                    case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 32];
-                    case "InvalidOriginAccessIdentity": return [3, 34];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 34];
-                    case "InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "InvalidOriginReadTimeout": return [3, 38];
-                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 38];
-                    case "InvalidProtocolSettings": return [3, 40];
-                    case "com.amazonaws.cloudfront#InvalidProtocolSettings": return [3, 40];
-                    case "InvalidQueryStringParameters": return [3, 42];
-                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 42];
-                    case "InvalidRelativePath": return [3, 44];
-                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 44];
-                    case "InvalidRequiredProtocol": return [3, 46];
-                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 46];
-                    case "InvalidResponseCode": return [3, 48];
-                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 48];
-                    case "InvalidTagging": return [3, 50];
-                    case "com.amazonaws.cloudfront#InvalidTagging": return [3, 50];
-                    case "InvalidTTLOrder": return [3, 52];
-                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 52];
-                    case "InvalidViewerCertificate": return [3, 54];
-                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 54];
-                    case "InvalidWebACLId": return [3, 56];
-                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 56];
-                    case "MissingBody": return [3, 58];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 58];
-                    case "NoSuchCachePolicy": return [3, 60];
-                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 60];
-                    case "NoSuchFieldLevelEncryptionConfig": return [3, 62];
-                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 62];
-                    case "NoSuchOrigin": return [3, 64];
-                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 64];
-                    case "NoSuchOriginRequestPolicy": return [3, 66];
-                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 66];
-                    case "NoSuchRealtimeLogConfig": return [3, 68];
-                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 68];
-                    case "NoSuchResponseHeadersPolicy": return [3, 70];
-                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 70];
-                    case "RealtimeLogConfigOwnerMismatch": return [3, 72];
-                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 72];
-                    case "TooManyCacheBehaviors": return [3, 74];
-                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 74];
-                    case "TooManyCertificates": return [3, 76];
-                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 76];
-                    case "TooManyCookieNamesInWhiteList": return [3, 78];
-                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 78];
-                    case "TooManyDistributionCNAMEs": return [3, 80];
-                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 80];
-                    case "TooManyDistributions": return [3, 82];
-                    case "com.amazonaws.cloudfront#TooManyDistributions": return [3, 82];
-                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 84];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 84];
-                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 86];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 86];
-                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 88];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 88];
-                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 90];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 90];
-                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 92];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 92];
-                    case "TooManyDistributionsWithFunctionAssociations": return [3, 94];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 94];
-                    case "TooManyDistributionsWithLambdaAssociations": return [3, 96];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 96];
-                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 98];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 98];
-                    case "TooManyFunctionAssociations": return [3, 100];
-                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 100];
-                    case "TooManyHeadersInForwardedValues": return [3, 102];
-                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 102];
-                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 104];
-                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 104];
-                    case "TooManyLambdaFunctionAssociations": return [3, 106];
-                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 106];
-                    case "TooManyOriginCustomHeaders": return [3, 108];
-                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 108];
-                    case "TooManyOriginGroupsPerDistribution": return [3, 110];
-                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 110];
-                    case "TooManyOrigins": return [3, 112];
-                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 112];
-                    case "TooManyQueryStringParameters": return [3, 114];
-                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 114];
-                    case "TooManyTrustedSigners": return [3, 116];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 116];
-                    case "TrustedKeyGroupDoesNotExist": return [3, 118];
-                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 118];
-                    case "TrustedSignerDoesNotExist": return [3, 120];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 120];
-                }
-                return [3, 122];
+                    case "InvalidDomainNameForOriginAccessControl": return [3, 16];
+                    case "com.amazonaws.cloudfront#InvalidDomainNameForOriginAccessControl": return [3, 16];
+                    case "InvalidErrorCode": return [3, 18];
+                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 18];
+                    case "InvalidForwardCookies": return [3, 20];
+                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 20];
+                    case "InvalidFunctionAssociation": return [3, 22];
+                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 22];
+                    case "InvalidGeoRestrictionParameter": return [3, 24];
+                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 24];
+                    case "InvalidHeadersForS3Origin": return [3, 26];
+                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 26];
+                    case "InvalidLambdaFunctionAssociation": return [3, 28];
+                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 28];
+                    case "InvalidLocationCode": return [3, 30];
+                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 30];
+                    case "InvalidMinimumProtocolVersion": return [3, 32];
+                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 32];
+                    case "InvalidOrigin": return [3, 34];
+                    case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 34];
+                    case "InvalidOriginAccessControl": return [3, 36];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 36];
+                    case "InvalidOriginAccessIdentity": return [3, 38];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 38];
+                    case "InvalidOriginKeepaliveTimeout": return [3, 40];
+                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 40];
+                    case "InvalidOriginReadTimeout": return [3, 42];
+                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 42];
+                    case "InvalidProtocolSettings": return [3, 44];
+                    case "com.amazonaws.cloudfront#InvalidProtocolSettings": return [3, 44];
+                    case "InvalidQueryStringParameters": return [3, 46];
+                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 46];
+                    case "InvalidRelativePath": return [3, 48];
+                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 48];
+                    case "InvalidRequiredProtocol": return [3, 50];
+                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 50];
+                    case "InvalidResponseCode": return [3, 52];
+                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 52];
+                    case "InvalidTagging": return [3, 54];
+                    case "com.amazonaws.cloudfront#InvalidTagging": return [3, 54];
+                    case "InvalidTTLOrder": return [3, 56];
+                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 56];
+                    case "InvalidViewerCertificate": return [3, 58];
+                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 58];
+                    case "InvalidWebACLId": return [3, 60];
+                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 60];
+                    case "MissingBody": return [3, 62];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 62];
+                    case "NoSuchCachePolicy": return [3, 64];
+                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 64];
+                    case "NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "NoSuchOrigin": return [3, 68];
+                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 68];
+                    case "NoSuchOriginRequestPolicy": return [3, 70];
+                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 70];
+                    case "NoSuchRealtimeLogConfig": return [3, 72];
+                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 72];
+                    case "NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "RealtimeLogConfigOwnerMismatch": return [3, 76];
+                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 76];
+                    case "TooManyCacheBehaviors": return [3, 78];
+                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 78];
+                    case "TooManyCertificates": return [3, 80];
+                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 80];
+                    case "TooManyCookieNamesInWhiteList": return [3, 82];
+                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 82];
+                    case "TooManyDistributionCNAMEs": return [3, 84];
+                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 84];
+                    case "TooManyDistributions": return [3, 86];
+                    case "com.amazonaws.cloudfront#TooManyDistributions": return [3, 86];
+                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 94];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 94];
+                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 96];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 96];
+                    case "TooManyDistributionsWithFunctionAssociations": return [3, 98];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 98];
+                    case "TooManyDistributionsWithLambdaAssociations": return [3, 100];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 100];
+                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 102];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 102];
+                    case "TooManyFunctionAssociations": return [3, 104];
+                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 104];
+                    case "TooManyHeadersInForwardedValues": return [3, 106];
+                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 106];
+                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 108];
+                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 108];
+                    case "TooManyLambdaFunctionAssociations": return [3, 110];
+                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 110];
+                    case "TooManyOriginCustomHeaders": return [3, 112];
+                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 112];
+                    case "TooManyOriginGroupsPerDistribution": return [3, 114];
+                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 114];
+                    case "TooManyOrigins": return [3, 116];
+                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 116];
+                    case "TooManyQueryStringParameters": return [3, 118];
+                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 118];
+                    case "TooManyTrustedSigners": return [3, 120];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 120];
+                    case "TrustedKeyGroupDoesNotExist": return [3, 122];
+                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 122];
+                    case "TrustedSignerDoesNotExist": return [3, 124];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 124];
+                }
+                return [3, 126];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
@@ -3326,113 +3508,117 @@ var deserializeAws_restXmlCreateDistributionWithTagsCommandError = function (out
             case 13: throw _d.sent();
             case 14: return [4, deserializeAws_restXmlInvalidDefaultRootObjectResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlInvalidDomainNameForOriginAccessControlResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
+            case 26: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
             case 27: throw _d.sent();
-            case 28: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
+            case 28: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
             case 29: throw _d.sent();
-            case 30: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
+            case 30: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
             case 31: throw _d.sent();
-            case 32: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
+            case 32: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
             case 33: throw _d.sent();
-            case 34: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 34: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
             case 35: throw _d.sent();
-            case 36: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
+            case 36: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 37: throw _d.sent();
-            case 38: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
+            case 38: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 39: throw _d.sent();
-            case 40: return [4, deserializeAws_restXmlInvalidProtocolSettingsResponse(parsedOutput, context)];
+            case 40: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
             case 41: throw _d.sent();
-            case 42: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
+            case 42: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
             case 43: throw _d.sent();
-            case 44: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
+            case 44: return [4, deserializeAws_restXmlInvalidProtocolSettingsResponse(parsedOutput, context)];
             case 45: throw _d.sent();
-            case 46: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
+            case 46: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
             case 47: throw _d.sent();
-            case 48: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
+            case 48: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
             case 49: throw _d.sent();
-            case 50: return [4, deserializeAws_restXmlInvalidTaggingResponse(parsedOutput, context)];
+            case 50: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
             case 51: throw _d.sent();
-            case 52: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
+            case 52: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
             case 53: throw _d.sent();
-            case 54: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
+            case 54: return [4, deserializeAws_restXmlInvalidTaggingResponse(parsedOutput, context)];
             case 55: throw _d.sent();
-            case 56: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
+            case 56: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
             case 57: throw _d.sent();
-            case 58: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 58: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
             case 59: throw _d.sent();
-            case 60: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
+            case 60: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
             case 61: throw _d.sent();
-            case 62: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 62: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 63: throw _d.sent();
-            case 64: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
+            case 64: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
             case 65: throw _d.sent();
-            case 66: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
+            case 66: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 67: throw _d.sent();
-            case 68: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
+            case 68: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
             case 69: throw _d.sent();
-            case 70: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 70: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
             case 71: throw _d.sent();
-            case 72: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
+            case 72: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
             case 73: throw _d.sent();
-            case 74: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
+            case 74: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
             case 75: throw _d.sent();
-            case 76: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
+            case 76: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
             case 77: throw _d.sent();
-            case 78: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
+            case 78: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
             case 79: throw _d.sent();
-            case 80: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
+            case 80: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
             case 81: throw _d.sent();
-            case 82: return [4, deserializeAws_restXmlTooManyDistributionsResponse(parsedOutput, context)];
+            case 82: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
             case 83: throw _d.sent();
-            case 84: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
+            case 84: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
             case 85: throw _d.sent();
-            case 86: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 86: return [4, deserializeAws_restXmlTooManyDistributionsResponse(parsedOutput, context)];
             case 87: throw _d.sent();
-            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
+            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
             case 89: throw _d.sent();
-            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
+            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 91: throw _d.sent();
-            case 92: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 92: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
             case 93: throw _d.sent();
-            case 94: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
+            case 94: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
             case 95: throw _d.sent();
-            case 96: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
+            case 96: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
             case 97: throw _d.sent();
-            case 98: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
+            case 98: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
             case 99: throw _d.sent();
-            case 100: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
+            case 100: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
             case 101: throw _d.sent();
-            case 102: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
+            case 102: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
             case 103: throw _d.sent();
-            case 104: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
+            case 104: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
             case 105: throw _d.sent();
-            case 106: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
+            case 106: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
             case 107: throw _d.sent();
-            case 108: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
+            case 108: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
             case 109: throw _d.sent();
-            case 110: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
+            case 110: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
             case 111: throw _d.sent();
-            case 112: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
+            case 112: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
             case 113: throw _d.sent();
-            case 114: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
+            case 114: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
             case 115: throw _d.sent();
-            case 116: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 116: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
             case 117: throw _d.sent();
-            case 118: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 118: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
             case 119: throw _d.sent();
-            case 120: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 120: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
             case 121: throw _d.sent();
-            case 122:
+            case 122: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 123: throw _d.sent();
+            case 124: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 125: throw _d.sent();
+            case 126:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -3440,8 +3626,8 @@ var deserializeAws_restXmlCreateDistributionWithTagsCommandError = function (out
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 123;
-            case 123: return [2];
+                _d.label = 127;
+            case 127: return [2];
         }
     });
 }); };
@@ -3863,17 +4049,84 @@ var deserializeAws_restXmlCreateMonitoringSubscriptionCommandError = function (o
                 switch (_b) {
                     case "AccessDenied": return [3, 2];
                     case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
-                    case "NoSuchDistribution": return [3, 4];
-                    case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 4];
-                    case "UnsupportedOperation": return [3, 6];
-                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 6];
+                    case "MonitoringSubscriptionAlreadyExists": return [3, 4];
+                    case "com.amazonaws.cloudfront#MonitoringSubscriptionAlreadyExists": return [3, 4];
+                    case "NoSuchDistribution": return [3, 6];
+                    case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 6];
+                    case "UnsupportedOperation": return [3, 8];
+                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 8];
                 }
-                return [3, 8];
+                return [3, 10];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
-            case 4: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
+            case 4: return [4, deserializeAws_restXmlMonitoringSubscriptionAlreadyExistsResponse(parsedOutput, context)];
             case 5: throw _d.sent();
-            case 6: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 6: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
+            case 7: throw _d.sent();
+            case 8: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 9: throw _d.sent();
+            case 10:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 11;
+            case 11: return [2];
+        }
+    });
+}); };
+export var deserializeAws_restXmlCreateOriginAccessControlCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (output.statusCode !== 201 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlCreateOriginAccessControlCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                    Location: [, output.headers["location"]],
+                    ETag: [, output.headers["etag"]],
+                });
+                _a = __expectObject;
+                return [4, parseBody(output.body, context)];
+            case 1:
+                data = _a.apply(void 0, [_b.sent()]);
+                contents.OriginAccessControl = deserializeAws_restXmlOriginAccessControl(data, context);
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlCreateOriginAccessControlCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "InvalidArgument": return [3, 2];
+                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 2];
+                    case "OriginAccessControlAlreadyExists": return [3, 4];
+                    case "com.amazonaws.cloudfront#OriginAccessControlAlreadyExists": return [3, 4];
+                    case "TooManyOriginAccessControls": return [3, 6];
+                    case "com.amazonaws.cloudfront#TooManyOriginAccessControls": return [3, 6];
+                }
+                return [3, 8];
+            case 2: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4: return [4, deserializeAws_restXmlOriginAccessControlAlreadyExistsResponse(parsedOutput, context)];
+            case 5: throw _d.sent();
+            case 6: return [4, deserializeAws_restXmlTooManyOriginAccessControlsResponse(parsedOutput, context)];
             case 7: throw _d.sent();
             case 8:
                 parsedBody = parsedOutput.body;
@@ -4227,22 +4480,24 @@ var deserializeAws_restXmlCreateStreamingDistributionCommandError = function (ou
                     case "com.amazonaws.cloudfront#InvalidArgument": return [3, 8];
                     case "InvalidOrigin": return [3, 10];
                     case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 10];
-                    case "InvalidOriginAccessIdentity": return [3, 12];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 12];
-                    case "MissingBody": return [3, 14];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 14];
-                    case "StreamingDistributionAlreadyExists": return [3, 16];
-                    case "com.amazonaws.cloudfront#StreamingDistributionAlreadyExists": return [3, 16];
-                    case "TooManyStreamingDistributionCNAMEs": return [3, 18];
-                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 18];
-                    case "TooManyStreamingDistributions": return [3, 20];
-                    case "com.amazonaws.cloudfront#TooManyStreamingDistributions": return [3, 20];
-                    case "TooManyTrustedSigners": return [3, 22];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 22];
-                    case "TrustedSignerDoesNotExist": return [3, 24];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 24];
+                    case "InvalidOriginAccessControl": return [3, 12];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 12];
+                    case "InvalidOriginAccessIdentity": return [3, 14];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 14];
+                    case "MissingBody": return [3, 16];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 16];
+                    case "StreamingDistributionAlreadyExists": return [3, 18];
+                    case "com.amazonaws.cloudfront#StreamingDistributionAlreadyExists": return [3, 18];
+                    case "TooManyStreamingDistributionCNAMEs": return [3, 20];
+                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 20];
+                    case "TooManyStreamingDistributions": return [3, 22];
+                    case "com.amazonaws.cloudfront#TooManyStreamingDistributions": return [3, 22];
+                    case "TooManyTrustedSigners": return [3, 24];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 24];
+                    case "TrustedSignerDoesNotExist": return [3, 26];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 26];
                 }
-                return [3, 26];
+                return [3, 28];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
@@ -4253,21 +4508,23 @@ var deserializeAws_restXmlCreateStreamingDistributionCommandError = function (ou
             case 9: throw _d.sent();
             case 10: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
             case 11: throw _d.sent();
-            case 12: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 12: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 14: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlStreamingDistributionAlreadyExistsResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlStreamingDistributionAlreadyExistsResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlTooManyStreamingDistributionsResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlTooManyStreamingDistributionsResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26:
+            case 26: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 27: throw _d.sent();
+            case 28:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -4275,8 +4532,8 @@ var deserializeAws_restXmlCreateStreamingDistributionCommandError = function (ou
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 27;
-            case 27: return [2];
+                _d.label = 29;
+            case 29: return [2];
         }
     });
 }); };
@@ -4326,24 +4583,26 @@ var deserializeAws_restXmlCreateStreamingDistributionWithTagsCommandError = func
                     case "com.amazonaws.cloudfront#InvalidArgument": return [3, 8];
                     case "InvalidOrigin": return [3, 10];
                     case "com.amazonaws.cloudfront#InvalidOrigin": return [3, 10];
-                    case "InvalidOriginAccessIdentity": return [3, 12];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 12];
-                    case "InvalidTagging": return [3, 14];
-                    case "com.amazonaws.cloudfront#InvalidTagging": return [3, 14];
-                    case "MissingBody": return [3, 16];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 16];
-                    case "StreamingDistributionAlreadyExists": return [3, 18];
-                    case "com.amazonaws.cloudfront#StreamingDistributionAlreadyExists": return [3, 18];
-                    case "TooManyStreamingDistributionCNAMEs": return [3, 20];
-                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 20];
-                    case "TooManyStreamingDistributions": return [3, 22];
-                    case "com.amazonaws.cloudfront#TooManyStreamingDistributions": return [3, 22];
-                    case "TooManyTrustedSigners": return [3, 24];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 24];
-                    case "TrustedSignerDoesNotExist": return [3, 26];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 26];
-                }
-                return [3, 28];
+                    case "InvalidOriginAccessControl": return [3, 12];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 12];
+                    case "InvalidOriginAccessIdentity": return [3, 14];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 14];
+                    case "InvalidTagging": return [3, 16];
+                    case "com.amazonaws.cloudfront#InvalidTagging": return [3, 16];
+                    case "MissingBody": return [3, 18];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 18];
+                    case "StreamingDistributionAlreadyExists": return [3, 20];
+                    case "com.amazonaws.cloudfront#StreamingDistributionAlreadyExists": return [3, 20];
+                    case "TooManyStreamingDistributionCNAMEs": return [3, 22];
+                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 22];
+                    case "TooManyStreamingDistributions": return [3, 24];
+                    case "com.amazonaws.cloudfront#TooManyStreamingDistributions": return [3, 24];
+                    case "TooManyTrustedSigners": return [3, 26];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 26];
+                    case "TrustedSignerDoesNotExist": return [3, 28];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 28];
+                }
+                return [3, 30];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
@@ -4354,23 +4613,25 @@ var deserializeAws_restXmlCreateStreamingDistributionWithTagsCommandError = func
             case 9: throw _d.sent();
             case 10: return [4, deserializeAws_restXmlInvalidOriginResponse(parsedOutput, context)];
             case 11: throw _d.sent();
-            case 12: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 12: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14: return [4, deserializeAws_restXmlInvalidTaggingResponse(parsedOutput, context)];
+            case 14: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlInvalidTaggingResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlStreamingDistributionAlreadyExistsResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlStreamingDistributionAlreadyExistsResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlTooManyStreamingDistributionsResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlTooManyStreamingDistributionsResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 26: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
             case 27: throw _d.sent();
-            case 28:
+            case 28: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 29: throw _d.sent();
+            case 30:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -4378,8 +4639,8 @@ var deserializeAws_restXmlCreateStreamingDistributionWithTagsCommandError = func
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 29;
-            case 29: return [2];
+                _d.label = 31;
+            case 31: return [2];
         }
     });
 }); };
@@ -4888,17 +5149,88 @@ var deserializeAws_restXmlDeleteMonitoringSubscriptionCommandError = function (o
                     case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
                     case "NoSuchDistribution": return [3, 4];
                     case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 4];
-                    case "UnsupportedOperation": return [3, 6];
-                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 6];
+                    case "NoSuchMonitoringSubscription": return [3, 6];
+                    case "com.amazonaws.cloudfront#NoSuchMonitoringSubscription": return [3, 6];
+                    case "UnsupportedOperation": return [3, 8];
+                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 8];
+                }
+                return [3, 10];
+            case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
+            case 5: throw _d.sent();
+            case 6: return [4, deserializeAws_restXmlNoSuchMonitoringSubscriptionResponse(parsedOutput, context)];
+            case 7: throw _d.sent();
+            case 8: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 9: throw _d.sent();
+            case 10:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 11;
+            case 11: return [2];
+        }
+    });
+}); };
+export var deserializeAws_restXmlDeleteOriginAccessControlCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents;
+    return __generator(this, function (_a) {
+        switch (_a.label) {
+            case 0:
+                if (output.statusCode !== 204 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlDeleteOriginAccessControlCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                });
+                return [4, collectBody(output.body, context)];
+            case 1:
+                _a.sent();
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlDeleteOriginAccessControlCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "AccessDenied": return [3, 2];
+                    case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
+                    case "InvalidIfMatchVersion": return [3, 4];
+                    case "com.amazonaws.cloudfront#InvalidIfMatchVersion": return [3, 4];
+                    case "NoSuchOriginAccessControl": return [3, 6];
+                    case "com.amazonaws.cloudfront#NoSuchOriginAccessControl": return [3, 6];
+                    case "OriginAccessControlInUse": return [3, 8];
+                    case "com.amazonaws.cloudfront#OriginAccessControlInUse": return [3, 8];
+                    case "PreconditionFailed": return [3, 10];
+                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 10];
                 }
-                return [3, 8];
+                return [3, 12];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
-            case 4: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
+            case 4: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
             case 5: throw _d.sent();
-            case 6: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 6: return [4, deserializeAws_restXmlNoSuchOriginAccessControlResponse(parsedOutput, context)];
             case 7: throw _d.sent();
-            case 8:
+            case 8: return [4, deserializeAws_restXmlOriginAccessControlInUseResponse(parsedOutput, context)];
+            case 9: throw _d.sent();
+            case 10: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 11: throw _d.sent();
+            case 12:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -4906,8 +5238,8 @@ var deserializeAws_restXmlDeleteMonitoringSubscriptionCommandError = function (o
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 9;
-            case 9: return [2];
+                _d.label = 13;
+            case 13: return [2];
         }
     });
 }); };
@@ -6153,17 +6485,21 @@ var deserializeAws_restXmlGetMonitoringSubscriptionCommandError = function (outp
                     case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
                     case "NoSuchDistribution": return [3, 4];
                     case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 4];
-                    case "UnsupportedOperation": return [3, 6];
-                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 6];
+                    case "NoSuchMonitoringSubscription": return [3, 6];
+                    case "com.amazonaws.cloudfront#NoSuchMonitoringSubscription": return [3, 6];
+                    case "UnsupportedOperation": return [3, 8];
+                    case "com.amazonaws.cloudfront#UnsupportedOperation": return [3, 8];
                 }
-                return [3, 8];
+                return [3, 10];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
             case 5: throw _d.sent();
-            case 6: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 6: return [4, deserializeAws_restXmlNoSuchMonitoringSubscriptionResponse(parsedOutput, context)];
             case 7: throw _d.sent();
-            case 8:
+            case 8: return [4, deserializeAws_restXmlUnsupportedOperationResponse(parsedOutput, context)];
+            case 9: throw _d.sent();
+            case 10:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -6171,8 +6507,124 @@ var deserializeAws_restXmlGetMonitoringSubscriptionCommandError = function (outp
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 9;
-            case 9: return [2];
+                _d.label = 11;
+            case 11: return [2];
+        }
+    });
+}); };
+export var deserializeAws_restXmlGetOriginAccessControlCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (output.statusCode !== 200 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlGetOriginAccessControlCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                    ETag: [, output.headers["etag"]],
+                });
+                _a = __expectObject;
+                return [4, parseBody(output.body, context)];
+            case 1:
+                data = _a.apply(void 0, [_b.sent()]);
+                contents.OriginAccessControl = deserializeAws_restXmlOriginAccessControl(data, context);
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlGetOriginAccessControlCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "AccessDenied": return [3, 2];
+                    case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
+                    case "NoSuchOriginAccessControl": return [3, 4];
+                    case "com.amazonaws.cloudfront#NoSuchOriginAccessControl": return [3, 4];
+                }
+                return [3, 6];
+            case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4: return [4, deserializeAws_restXmlNoSuchOriginAccessControlResponse(parsedOutput, context)];
+            case 5: throw _d.sent();
+            case 6:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 7;
+            case 7: return [2];
+        }
+    });
+}); };
+export var deserializeAws_restXmlGetOriginAccessControlConfigCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (output.statusCode !== 200 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlGetOriginAccessControlConfigCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                    ETag: [, output.headers["etag"]],
+                });
+                _a = __expectObject;
+                return [4, parseBody(output.body, context)];
+            case 1:
+                data = _a.apply(void 0, [_b.sent()]);
+                contents.OriginAccessControlConfig = deserializeAws_restXmlOriginAccessControlConfig(data, context);
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlGetOriginAccessControlConfigCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "AccessDenied": return [3, 2];
+                    case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
+                    case "NoSuchOriginAccessControl": return [3, 4];
+                    case "com.amazonaws.cloudfront#NoSuchOriginAccessControl": return [3, 4];
+                }
+                return [3, 6];
+            case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4: return [4, deserializeAws_restXmlNoSuchOriginAccessControlResponse(parsedOutput, context)];
+            case 5: throw _d.sent();
+            case 6:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 7;
+            case 7: return [2];
         }
     });
 }); };
@@ -7555,6 +8007,59 @@ var deserializeAws_restXmlListKeyGroupsCommandError = function (output, context)
         }
     });
 }); };
+export var deserializeAws_restXmlListOriginAccessControlsCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (output.statusCode !== 200 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlListOriginAccessControlsCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                });
+                _a = __expectObject;
+                return [4, parseBody(output.body, context)];
+            case 1:
+                data = _a.apply(void 0, [_b.sent()]);
+                contents.OriginAccessControlList = deserializeAws_restXmlOriginAccessControlList(data, context);
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlListOriginAccessControlsCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "InvalidArgument": return [3, 2];
+                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 2];
+                }
+                return [3, 4];
+            case 2: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 5;
+            case 5: return [2];
+        }
+    });
+}); };
 export var deserializeAws_restXmlListOriginRequestPoliciesCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, _a;
     return __generator(this, function (_b) {
@@ -8390,239 +8895,251 @@ var deserializeAws_restXmlUpdateDistributionCommandError = function (output, con
                     case "com.amazonaws.cloudfront#CNAMEAlreadyExists": return [3, 4];
                     case "IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior": return [3, 6];
                     case "com.amazonaws.cloudfront#IllegalFieldLevelEncryptionConfigAssociationWithCacheBehavior": return [3, 6];
-                    case "IllegalUpdate": return [3, 8];
-                    case "com.amazonaws.cloudfront#IllegalUpdate": return [3, 8];
-                    case "InconsistentQuantities": return [3, 10];
-                    case "com.amazonaws.cloudfront#InconsistentQuantities": return [3, 10];
-                    case "InvalidArgument": return [3, 12];
-                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 12];
-                    case "InvalidDefaultRootObject": return [3, 14];
-                    case "com.amazonaws.cloudfront#InvalidDefaultRootObject": return [3, 14];
-                    case "InvalidErrorCode": return [3, 16];
-                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 16];
-                    case "InvalidForwardCookies": return [3, 18];
-                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 18];
-                    case "InvalidFunctionAssociation": return [3, 20];
-                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 20];
-                    case "InvalidGeoRestrictionParameter": return [3, 22];
-                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 22];
-                    case "InvalidHeadersForS3Origin": return [3, 24];
-                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 24];
-                    case "InvalidIfMatchVersion": return [3, 26];
-                    case "com.amazonaws.cloudfront#InvalidIfMatchVersion": return [3, 26];
-                    case "InvalidLambdaFunctionAssociation": return [3, 28];
-                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 28];
-                    case "InvalidLocationCode": return [3, 30];
-                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 30];
-                    case "InvalidMinimumProtocolVersion": return [3, 32];
-                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 32];
-                    case "InvalidOriginAccessIdentity": return [3, 34];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 34];
-                    case "InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 36];
-                    case "InvalidOriginReadTimeout": return [3, 38];
-                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 38];
-                    case "InvalidQueryStringParameters": return [3, 40];
-                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 40];
-                    case "InvalidRelativePath": return [3, 42];
-                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 42];
-                    case "InvalidRequiredProtocol": return [3, 44];
-                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 44];
-                    case "InvalidResponseCode": return [3, 46];
-                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 46];
-                    case "InvalidTTLOrder": return [3, 48];
-                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 48];
-                    case "InvalidViewerCertificate": return [3, 50];
-                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 50];
-                    case "InvalidWebACLId": return [3, 52];
-                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 52];
-                    case "MissingBody": return [3, 54];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 54];
-                    case "NoSuchCachePolicy": return [3, 56];
-                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 56];
-                    case "NoSuchDistribution": return [3, 58];
-                    case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 58];
-                    case "NoSuchFieldLevelEncryptionConfig": return [3, 60];
-                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 60];
-                    case "NoSuchOrigin": return [3, 62];
-                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 62];
-                    case "NoSuchOriginRequestPolicy": return [3, 64];
-                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 64];
-                    case "NoSuchRealtimeLogConfig": return [3, 66];
-                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 66];
-                    case "NoSuchResponseHeadersPolicy": return [3, 68];
-                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 68];
-                    case "PreconditionFailed": return [3, 70];
-                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 70];
-                    case "RealtimeLogConfigOwnerMismatch": return [3, 72];
-                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 72];
-                    case "TooManyCacheBehaviors": return [3, 74];
-                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 74];
-                    case "TooManyCertificates": return [3, 76];
-                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 76];
-                    case "TooManyCookieNamesInWhiteList": return [3, 78];
-                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 78];
-                    case "TooManyDistributionCNAMEs": return [3, 80];
-                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 80];
-                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 82];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 82];
-                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 84];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 84];
-                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 86];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 86];
-                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 88];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 88];
-                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 90];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 90];
-                    case "TooManyDistributionsWithFunctionAssociations": return [3, 92];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 92];
-                    case "TooManyDistributionsWithLambdaAssociations": return [3, 94];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 94];
-                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 96];
-                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 96];
-                    case "TooManyFunctionAssociations": return [3, 98];
-                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 98];
-                    case "TooManyHeadersInForwardedValues": return [3, 100];
-                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 100];
-                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 102];
-                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 102];
-                    case "TooManyLambdaFunctionAssociations": return [3, 104];
-                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 104];
-                    case "TooManyOriginCustomHeaders": return [3, 106];
-                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 106];
-                    case "TooManyOriginGroupsPerDistribution": return [3, 108];
-                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 108];
-                    case "TooManyOrigins": return [3, 110];
-                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 110];
-                    case "TooManyQueryStringParameters": return [3, 112];
-                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 112];
-                    case "TooManyTrustedSigners": return [3, 114];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 114];
-                    case "TrustedKeyGroupDoesNotExist": return [3, 116];
-                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 116];
-                    case "TrustedSignerDoesNotExist": return [3, 118];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 118];
-                }
-                return [3, 120];
+                    case "IllegalOriginAccessConfiguration": return [3, 8];
+                    case "com.amazonaws.cloudfront#IllegalOriginAccessConfiguration": return [3, 8];
+                    case "IllegalUpdate": return [3, 10];
+                    case "com.amazonaws.cloudfront#IllegalUpdate": return [3, 10];
+                    case "InconsistentQuantities": return [3, 12];
+                    case "com.amazonaws.cloudfront#InconsistentQuantities": return [3, 12];
+                    case "InvalidArgument": return [3, 14];
+                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 14];
+                    case "InvalidDefaultRootObject": return [3, 16];
+                    case "com.amazonaws.cloudfront#InvalidDefaultRootObject": return [3, 16];
+                    case "InvalidDomainNameForOriginAccessControl": return [3, 18];
+                    case "com.amazonaws.cloudfront#InvalidDomainNameForOriginAccessControl": return [3, 18];
+                    case "InvalidErrorCode": return [3, 20];
+                    case "com.amazonaws.cloudfront#InvalidErrorCode": return [3, 20];
+                    case "InvalidForwardCookies": return [3, 22];
+                    case "com.amazonaws.cloudfront#InvalidForwardCookies": return [3, 22];
+                    case "InvalidFunctionAssociation": return [3, 24];
+                    case "com.amazonaws.cloudfront#InvalidFunctionAssociation": return [3, 24];
+                    case "InvalidGeoRestrictionParameter": return [3, 26];
+                    case "com.amazonaws.cloudfront#InvalidGeoRestrictionParameter": return [3, 26];
+                    case "InvalidHeadersForS3Origin": return [3, 28];
+                    case "com.amazonaws.cloudfront#InvalidHeadersForS3Origin": return [3, 28];
+                    case "InvalidIfMatchVersion": return [3, 30];
+                    case "com.amazonaws.cloudfront#InvalidIfMatchVersion": return [3, 30];
+                    case "InvalidLambdaFunctionAssociation": return [3, 32];
+                    case "com.amazonaws.cloudfront#InvalidLambdaFunctionAssociation": return [3, 32];
+                    case "InvalidLocationCode": return [3, 34];
+                    case "com.amazonaws.cloudfront#InvalidLocationCode": return [3, 34];
+                    case "InvalidMinimumProtocolVersion": return [3, 36];
+                    case "com.amazonaws.cloudfront#InvalidMinimumProtocolVersion": return [3, 36];
+                    case "InvalidOriginAccessControl": return [3, 38];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 38];
+                    case "InvalidOriginAccessIdentity": return [3, 40];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 40];
+                    case "InvalidOriginKeepaliveTimeout": return [3, 42];
+                    case "com.amazonaws.cloudfront#InvalidOriginKeepaliveTimeout": return [3, 42];
+                    case "InvalidOriginReadTimeout": return [3, 44];
+                    case "com.amazonaws.cloudfront#InvalidOriginReadTimeout": return [3, 44];
+                    case "InvalidQueryStringParameters": return [3, 46];
+                    case "com.amazonaws.cloudfront#InvalidQueryStringParameters": return [3, 46];
+                    case "InvalidRelativePath": return [3, 48];
+                    case "com.amazonaws.cloudfront#InvalidRelativePath": return [3, 48];
+                    case "InvalidRequiredProtocol": return [3, 50];
+                    case "com.amazonaws.cloudfront#InvalidRequiredProtocol": return [3, 50];
+                    case "InvalidResponseCode": return [3, 52];
+                    case "com.amazonaws.cloudfront#InvalidResponseCode": return [3, 52];
+                    case "InvalidTTLOrder": return [3, 54];
+                    case "com.amazonaws.cloudfront#InvalidTTLOrder": return [3, 54];
+                    case "InvalidViewerCertificate": return [3, 56];
+                    case "com.amazonaws.cloudfront#InvalidViewerCertificate": return [3, 56];
+                    case "InvalidWebACLId": return [3, 58];
+                    case "com.amazonaws.cloudfront#InvalidWebACLId": return [3, 58];
+                    case "MissingBody": return [3, 60];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 60];
+                    case "NoSuchCachePolicy": return [3, 62];
+                    case "com.amazonaws.cloudfront#NoSuchCachePolicy": return [3, 62];
+                    case "NoSuchDistribution": return [3, 64];
+                    case "com.amazonaws.cloudfront#NoSuchDistribution": return [3, 64];
+                    case "NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "com.amazonaws.cloudfront#NoSuchFieldLevelEncryptionConfig": return [3, 66];
+                    case "NoSuchOrigin": return [3, 68];
+                    case "com.amazonaws.cloudfront#NoSuchOrigin": return [3, 68];
+                    case "NoSuchOriginRequestPolicy": return [3, 70];
+                    case "com.amazonaws.cloudfront#NoSuchOriginRequestPolicy": return [3, 70];
+                    case "NoSuchRealtimeLogConfig": return [3, 72];
+                    case "com.amazonaws.cloudfront#NoSuchRealtimeLogConfig": return [3, 72];
+                    case "NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "com.amazonaws.cloudfront#NoSuchResponseHeadersPolicy": return [3, 74];
+                    case "PreconditionFailed": return [3, 76];
+                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 76];
+                    case "RealtimeLogConfigOwnerMismatch": return [3, 78];
+                    case "com.amazonaws.cloudfront#RealtimeLogConfigOwnerMismatch": return [3, 78];
+                    case "TooManyCacheBehaviors": return [3, 80];
+                    case "com.amazonaws.cloudfront#TooManyCacheBehaviors": return [3, 80];
+                    case "TooManyCertificates": return [3, 82];
+                    case "com.amazonaws.cloudfront#TooManyCertificates": return [3, 82];
+                    case "TooManyCookieNamesInWhiteList": return [3, 84];
+                    case "com.amazonaws.cloudfront#TooManyCookieNamesInWhiteList": return [3, 84];
+                    case "TooManyDistributionCNAMEs": return [3, 86];
+                    case "com.amazonaws.cloudfront#TooManyDistributionCNAMEs": return [3, 86];
+                    case "TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToCachePolicy": return [3, 88];
+                    case "TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToFieldLevelEncryptionConfig": return [3, 90];
+                    case "TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToKeyGroup": return [3, 92];
+                    case "TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 94];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToOriginRequestPolicy": return [3, 94];
+                    case "TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 96];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsAssociatedToResponseHeadersPolicy": return [3, 96];
+                    case "TooManyDistributionsWithFunctionAssociations": return [3, 98];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithFunctionAssociations": return [3, 98];
+                    case "TooManyDistributionsWithLambdaAssociations": return [3, 100];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithLambdaAssociations": return [3, 100];
+                    case "TooManyDistributionsWithSingleFunctionARN": return [3, 102];
+                    case "com.amazonaws.cloudfront#TooManyDistributionsWithSingleFunctionARN": return [3, 102];
+                    case "TooManyFunctionAssociations": return [3, 104];
+                    case "com.amazonaws.cloudfront#TooManyFunctionAssociations": return [3, 104];
+                    case "TooManyHeadersInForwardedValues": return [3, 106];
+                    case "com.amazonaws.cloudfront#TooManyHeadersInForwardedValues": return [3, 106];
+                    case "TooManyKeyGroupsAssociatedToDistribution": return [3, 108];
+                    case "com.amazonaws.cloudfront#TooManyKeyGroupsAssociatedToDistribution": return [3, 108];
+                    case "TooManyLambdaFunctionAssociations": return [3, 110];
+                    case "com.amazonaws.cloudfront#TooManyLambdaFunctionAssociations": return [3, 110];
+                    case "TooManyOriginCustomHeaders": return [3, 112];
+                    case "com.amazonaws.cloudfront#TooManyOriginCustomHeaders": return [3, 112];
+                    case "TooManyOriginGroupsPerDistribution": return [3, 114];
+                    case "com.amazonaws.cloudfront#TooManyOriginGroupsPerDistribution": return [3, 114];
+                    case "TooManyOrigins": return [3, 116];
+                    case "com.amazonaws.cloudfront#TooManyOrigins": return [3, 116];
+                    case "TooManyQueryStringParameters": return [3, 118];
+                    case "com.amazonaws.cloudfront#TooManyQueryStringParameters": return [3, 118];
+                    case "TooManyTrustedSigners": return [3, 120];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 120];
+                    case "TrustedKeyGroupDoesNotExist": return [3, 122];
+                    case "com.amazonaws.cloudfront#TrustedKeyGroupDoesNotExist": return [3, 122];
+                    case "TrustedSignerDoesNotExist": return [3, 124];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 124];
+                }
+                return [3, 126];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
             case 5: throw _d.sent();
             case 6: return [4, deserializeAws_restXmlIllegalFieldLevelEncryptionConfigAssociationWithCacheBehaviorResponse(parsedOutput, context)];
             case 7: throw _d.sent();
-            case 8: return [4, deserializeAws_restXmlIllegalUpdateResponse(parsedOutput, context)];
+            case 8: return [4, deserializeAws_restXmlIllegalOriginAccessConfigurationResponse(parsedOutput, context)];
             case 9: throw _d.sent();
-            case 10: return [4, deserializeAws_restXmlInconsistentQuantitiesResponse(parsedOutput, context)];
+            case 10: return [4, deserializeAws_restXmlIllegalUpdateResponse(parsedOutput, context)];
             case 11: throw _d.sent();
-            case 12: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+            case 12: return [4, deserializeAws_restXmlInconsistentQuantitiesResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14: return [4, deserializeAws_restXmlInvalidDefaultRootObjectResponse(parsedOutput, context)];
+            case 14: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlInvalidDefaultRootObjectResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlInvalidDomainNameForOriginAccessControlResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlInvalidErrorCodeResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlInvalidForwardCookiesResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlInvalidFunctionAssociationResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
+            case 26: return [4, deserializeAws_restXmlInvalidGeoRestrictionParameterResponse(parsedOutput, context)];
             case 27: throw _d.sent();
-            case 28: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
+            case 28: return [4, deserializeAws_restXmlInvalidHeadersForS3OriginResponse(parsedOutput, context)];
             case 29: throw _d.sent();
-            case 30: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
+            case 30: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
             case 31: throw _d.sent();
-            case 32: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
+            case 32: return [4, deserializeAws_restXmlInvalidLambdaFunctionAssociationResponse(parsedOutput, context)];
             case 33: throw _d.sent();
-            case 34: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 34: return [4, deserializeAws_restXmlInvalidLocationCodeResponse(parsedOutput, context)];
             case 35: throw _d.sent();
-            case 36: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
+            case 36: return [4, deserializeAws_restXmlInvalidMinimumProtocolVersionResponse(parsedOutput, context)];
             case 37: throw _d.sent();
-            case 38: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
+            case 38: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 39: throw _d.sent();
-            case 40: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
+            case 40: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 41: throw _d.sent();
-            case 42: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
+            case 42: return [4, deserializeAws_restXmlInvalidOriginKeepaliveTimeoutResponse(parsedOutput, context)];
             case 43: throw _d.sent();
-            case 44: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
+            case 44: return [4, deserializeAws_restXmlInvalidOriginReadTimeoutResponse(parsedOutput, context)];
             case 45: throw _d.sent();
-            case 46: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
+            case 46: return [4, deserializeAws_restXmlInvalidQueryStringParametersResponse(parsedOutput, context)];
             case 47: throw _d.sent();
-            case 48: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
+            case 48: return [4, deserializeAws_restXmlInvalidRelativePathResponse(parsedOutput, context)];
             case 49: throw _d.sent();
-            case 50: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
+            case 50: return [4, deserializeAws_restXmlInvalidRequiredProtocolResponse(parsedOutput, context)];
             case 51: throw _d.sent();
-            case 52: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
+            case 52: return [4, deserializeAws_restXmlInvalidResponseCodeResponse(parsedOutput, context)];
             case 53: throw _d.sent();
-            case 54: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 54: return [4, deserializeAws_restXmlInvalidTTLOrderResponse(parsedOutput, context)];
             case 55: throw _d.sent();
-            case 56: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
+            case 56: return [4, deserializeAws_restXmlInvalidViewerCertificateResponse(parsedOutput, context)];
             case 57: throw _d.sent();
-            case 58: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
+            case 58: return [4, deserializeAws_restXmlInvalidWebACLIdResponse(parsedOutput, context)];
             case 59: throw _d.sent();
-            case 60: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 60: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 61: throw _d.sent();
-            case 62: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
+            case 62: return [4, deserializeAws_restXmlNoSuchCachePolicyResponse(parsedOutput, context)];
             case 63: throw _d.sent();
-            case 64: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
+            case 64: return [4, deserializeAws_restXmlNoSuchDistributionResponse(parsedOutput, context)];
             case 65: throw _d.sent();
-            case 66: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
+            case 66: return [4, deserializeAws_restXmlNoSuchFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 67: throw _d.sent();
-            case 68: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 68: return [4, deserializeAws_restXmlNoSuchOriginResponse(parsedOutput, context)];
             case 69: throw _d.sent();
-            case 70: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 70: return [4, deserializeAws_restXmlNoSuchOriginRequestPolicyResponse(parsedOutput, context)];
             case 71: throw _d.sent();
-            case 72: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
+            case 72: return [4, deserializeAws_restXmlNoSuchRealtimeLogConfigResponse(parsedOutput, context)];
             case 73: throw _d.sent();
-            case 74: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
+            case 74: return [4, deserializeAws_restXmlNoSuchResponseHeadersPolicyResponse(parsedOutput, context)];
             case 75: throw _d.sent();
-            case 76: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
+            case 76: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
             case 77: throw _d.sent();
-            case 78: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
+            case 78: return [4, deserializeAws_restXmlRealtimeLogConfigOwnerMismatchResponse(parsedOutput, context)];
             case 79: throw _d.sent();
-            case 80: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
+            case 80: return [4, deserializeAws_restXmlTooManyCacheBehaviorsResponse(parsedOutput, context)];
             case 81: throw _d.sent();
-            case 82: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
+            case 82: return [4, deserializeAws_restXmlTooManyCertificatesResponse(parsedOutput, context)];
             case 83: throw _d.sent();
-            case 84: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
+            case 84: return [4, deserializeAws_restXmlTooManyCookieNamesInWhiteListResponse(parsedOutput, context)];
             case 85: throw _d.sent();
-            case 86: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
+            case 86: return [4, deserializeAws_restXmlTooManyDistributionCNAMEsResponse(parsedOutput, context)];
             case 87: throw _d.sent();
-            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
+            case 88: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToCachePolicyResponse(parsedOutput, context)];
             case 89: throw _d.sent();
-            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
+            case 90: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToFieldLevelEncryptionConfigResponse(parsedOutput, context)];
             case 91: throw _d.sent();
-            case 92: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
+            case 92: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse(parsedOutput, context)];
             case 93: throw _d.sent();
-            case 94: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
+            case 94: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse(parsedOutput, context)];
             case 95: throw _d.sent();
-            case 96: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
+            case 96: return [4, deserializeAws_restXmlTooManyDistributionsAssociatedToResponseHeadersPolicyResponse(parsedOutput, context)];
             case 97: throw _d.sent();
-            case 98: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
+            case 98: return [4, deserializeAws_restXmlTooManyDistributionsWithFunctionAssociationsResponse(parsedOutput, context)];
             case 99: throw _d.sent();
-            case 100: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
+            case 100: return [4, deserializeAws_restXmlTooManyDistributionsWithLambdaAssociationsResponse(parsedOutput, context)];
             case 101: throw _d.sent();
-            case 102: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
+            case 102: return [4, deserializeAws_restXmlTooManyDistributionsWithSingleFunctionARNResponse(parsedOutput, context)];
             case 103: throw _d.sent();
-            case 104: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
+            case 104: return [4, deserializeAws_restXmlTooManyFunctionAssociationsResponse(parsedOutput, context)];
             case 105: throw _d.sent();
-            case 106: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
+            case 106: return [4, deserializeAws_restXmlTooManyHeadersInForwardedValuesResponse(parsedOutput, context)];
             case 107: throw _d.sent();
-            case 108: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
+            case 108: return [4, deserializeAws_restXmlTooManyKeyGroupsAssociatedToDistributionResponse(parsedOutput, context)];
             case 109: throw _d.sent();
-            case 110: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
+            case 110: return [4, deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse(parsedOutput, context)];
             case 111: throw _d.sent();
-            case 112: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
+            case 112: return [4, deserializeAws_restXmlTooManyOriginCustomHeadersResponse(parsedOutput, context)];
             case 113: throw _d.sent();
-            case 114: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 114: return [4, deserializeAws_restXmlTooManyOriginGroupsPerDistributionResponse(parsedOutput, context)];
             case 115: throw _d.sent();
-            case 116: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 116: return [4, deserializeAws_restXmlTooManyOriginsResponse(parsedOutput, context)];
             case 117: throw _d.sent();
-            case 118: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 118: return [4, deserializeAws_restXmlTooManyQueryStringParametersResponse(parsedOutput, context)];
             case 119: throw _d.sent();
-            case 120:
+            case 120: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 121: throw _d.sent();
+            case 122: return [4, deserializeAws_restXmlTrustedKeyGroupDoesNotExistResponse(parsedOutput, context)];
+            case 123: throw _d.sent();
+            case 124: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 125: throw _d.sent();
+            case 126:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -8630,8 +9147,8 @@ var deserializeAws_restXmlUpdateDistributionCommandError = function (output, con
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 121;
-            case 121: return [2];
+                _d.label = 127;
+            case 127: return [2];
         }
     });
 }); };
@@ -8949,20 +9466,98 @@ var deserializeAws_restXmlUpdateKeyGroupCommandError = function (output, context
                     case "TooManyPublicKeysInKeyGroup": return [3, 12];
                     case "com.amazonaws.cloudfront#TooManyPublicKeysInKeyGroup": return [3, 12];
                 }
-                return [3, 14];
-            case 2: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+                return [3, 14];
+            case 2: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
+            case 3: throw _d.sent();
+            case 4: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
+            case 5: throw _d.sent();
+            case 6: return [4, deserializeAws_restXmlKeyGroupAlreadyExistsResponse(parsedOutput, context)];
+            case 7: throw _d.sent();
+            case 8: return [4, deserializeAws_restXmlNoSuchResourceResponse(parsedOutput, context)];
+            case 9: throw _d.sent();
+            case 10: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 11: throw _d.sent();
+            case 12: return [4, deserializeAws_restXmlTooManyPublicKeysInKeyGroupResponse(parsedOutput, context)];
+            case 13: throw _d.sent();
+            case 14:
+                parsedBody = parsedOutput.body;
+                throwDefaultError({
+                    output: output,
+                    parsedBody: parsedBody.Error,
+                    exceptionCtor: __BaseException,
+                    errorCode: errorCode,
+                });
+                _d.label = 15;
+            case 15: return [2];
+        }
+    });
+}); };
+export var deserializeAws_restXmlUpdateOriginAccessControlCommand = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, _a;
+    return __generator(this, function (_b) {
+        switch (_b.label) {
+            case 0:
+                if (output.statusCode !== 200 && output.statusCode >= 300) {
+                    return [2, deserializeAws_restXmlUpdateOriginAccessControlCommandError(output, context)];
+                }
+                contents = map({
+                    $metadata: deserializeMetadata(output),
+                    ETag: [, output.headers["etag"]],
+                });
+                _a = __expectObject;
+                return [4, parseBody(output.body, context)];
+            case 1:
+                data = _a.apply(void 0, [_b.sent()]);
+                contents.OriginAccessControl = deserializeAws_restXmlOriginAccessControl(data, context);
+                return [2, contents];
+        }
+    });
+}); };
+var deserializeAws_restXmlUpdateOriginAccessControlCommandError = function (output, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var parsedOutput, _a, errorCode, _b, parsedBody;
+    var _c;
+    return __generator(this, function (_d) {
+        switch (_d.label) {
+            case 0:
+                _a = [__assign({}, output)];
+                _c = {};
+                return [4, parseBody(output.body, context)];
+            case 1:
+                parsedOutput = __assign.apply(void 0, _a.concat([(_c.body = _d.sent(), _c)]));
+                errorCode = loadRestXmlErrorCode(output, parsedOutput.body);
+                _b = errorCode;
+                switch (_b) {
+                    case "AccessDenied": return [3, 2];
+                    case "com.amazonaws.cloudfront#AccessDenied": return [3, 2];
+                    case "IllegalUpdate": return [3, 4];
+                    case "com.amazonaws.cloudfront#IllegalUpdate": return [3, 4];
+                    case "InvalidArgument": return [3, 6];
+                    case "com.amazonaws.cloudfront#InvalidArgument": return [3, 6];
+                    case "InvalidIfMatchVersion": return [3, 8];
+                    case "com.amazonaws.cloudfront#InvalidIfMatchVersion": return [3, 8];
+                    case "NoSuchOriginAccessControl": return [3, 10];
+                    case "com.amazonaws.cloudfront#NoSuchOriginAccessControl": return [3, 10];
+                    case "OriginAccessControlAlreadyExists": return [3, 12];
+                    case "com.amazonaws.cloudfront#OriginAccessControlAlreadyExists": return [3, 12];
+                    case "PreconditionFailed": return [3, 14];
+                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 14];
+                }
+                return [3, 16];
+            case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
-            case 4: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
+            case 4: return [4, deserializeAws_restXmlIllegalUpdateResponse(parsedOutput, context)];
             case 5: throw _d.sent();
-            case 6: return [4, deserializeAws_restXmlKeyGroupAlreadyExistsResponse(parsedOutput, context)];
+            case 6: return [4, deserializeAws_restXmlInvalidArgumentResponse(parsedOutput, context)];
             case 7: throw _d.sent();
-            case 8: return [4, deserializeAws_restXmlNoSuchResourceResponse(parsedOutput, context)];
+            case 8: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
             case 9: throw _d.sent();
-            case 10: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 10: return [4, deserializeAws_restXmlNoSuchOriginAccessControlResponse(parsedOutput, context)];
             case 11: throw _d.sent();
-            case 12: return [4, deserializeAws_restXmlTooManyPublicKeysInKeyGroupResponse(parsedOutput, context)];
+            case 12: return [4, deserializeAws_restXmlOriginAccessControlAlreadyExistsResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14:
+            case 14: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 15: throw _d.sent();
+            case 16:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -8970,8 +9565,8 @@ var deserializeAws_restXmlUpdateKeyGroupCommandError = function (output, context
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 15;
-            case 15: return [2];
+                _d.label = 17;
+            case 17: return [2];
         }
     });
 }); };
@@ -9348,22 +9943,24 @@ var deserializeAws_restXmlUpdateStreamingDistributionCommandError = function (ou
                     case "com.amazonaws.cloudfront#InvalidArgument": return [3, 10];
                     case "InvalidIfMatchVersion": return [3, 12];
                     case "com.amazonaws.cloudfront#InvalidIfMatchVersion": return [3, 12];
-                    case "InvalidOriginAccessIdentity": return [3, 14];
-                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 14];
-                    case "MissingBody": return [3, 16];
-                    case "com.amazonaws.cloudfront#MissingBody": return [3, 16];
-                    case "NoSuchStreamingDistribution": return [3, 18];
-                    case "com.amazonaws.cloudfront#NoSuchStreamingDistribution": return [3, 18];
-                    case "PreconditionFailed": return [3, 20];
-                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 20];
-                    case "TooManyStreamingDistributionCNAMEs": return [3, 22];
-                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 22];
-                    case "TooManyTrustedSigners": return [3, 24];
-                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 24];
-                    case "TrustedSignerDoesNotExist": return [3, 26];
-                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 26];
-                }
-                return [3, 28];
+                    case "InvalidOriginAccessControl": return [3, 14];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessControl": return [3, 14];
+                    case "InvalidOriginAccessIdentity": return [3, 16];
+                    case "com.amazonaws.cloudfront#InvalidOriginAccessIdentity": return [3, 16];
+                    case "MissingBody": return [3, 18];
+                    case "com.amazonaws.cloudfront#MissingBody": return [3, 18];
+                    case "NoSuchStreamingDistribution": return [3, 20];
+                    case "com.amazonaws.cloudfront#NoSuchStreamingDistribution": return [3, 20];
+                    case "PreconditionFailed": return [3, 22];
+                    case "com.amazonaws.cloudfront#PreconditionFailed": return [3, 22];
+                    case "TooManyStreamingDistributionCNAMEs": return [3, 24];
+                    case "com.amazonaws.cloudfront#TooManyStreamingDistributionCNAMEs": return [3, 24];
+                    case "TooManyTrustedSigners": return [3, 26];
+                    case "com.amazonaws.cloudfront#TooManyTrustedSigners": return [3, 26];
+                    case "TrustedSignerDoesNotExist": return [3, 28];
+                    case "com.amazonaws.cloudfront#TrustedSignerDoesNotExist": return [3, 28];
+                }
+                return [3, 30];
             case 2: return [4, deserializeAws_restXmlAccessDeniedResponse(parsedOutput, context)];
             case 3: throw _d.sent();
             case 4: return [4, deserializeAws_restXmlCNAMEAlreadyExistsResponse(parsedOutput, context)];
@@ -9376,21 +9973,23 @@ var deserializeAws_restXmlUpdateStreamingDistributionCommandError = function (ou
             case 11: throw _d.sent();
             case 12: return [4, deserializeAws_restXmlInvalidIfMatchVersionResponse(parsedOutput, context)];
             case 13: throw _d.sent();
-            case 14: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
+            case 14: return [4, deserializeAws_restXmlInvalidOriginAccessControlResponse(parsedOutput, context)];
             case 15: throw _d.sent();
-            case 16: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
+            case 16: return [4, deserializeAws_restXmlInvalidOriginAccessIdentityResponse(parsedOutput, context)];
             case 17: throw _d.sent();
-            case 18: return [4, deserializeAws_restXmlNoSuchStreamingDistributionResponse(parsedOutput, context)];
+            case 18: return [4, deserializeAws_restXmlMissingBodyResponse(parsedOutput, context)];
             case 19: throw _d.sent();
-            case 20: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
+            case 20: return [4, deserializeAws_restXmlNoSuchStreamingDistributionResponse(parsedOutput, context)];
             case 21: throw _d.sent();
-            case 22: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
+            case 22: return [4, deserializeAws_restXmlPreconditionFailedResponse(parsedOutput, context)];
             case 23: throw _d.sent();
-            case 24: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
+            case 24: return [4, deserializeAws_restXmlTooManyStreamingDistributionCNAMEsResponse(parsedOutput, context)];
             case 25: throw _d.sent();
-            case 26: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 26: return [4, deserializeAws_restXmlTooManyTrustedSignersResponse(parsedOutput, context)];
             case 27: throw _d.sent();
-            case 28:
+            case 28: return [4, deserializeAws_restXmlTrustedSignerDoesNotExistResponse(parsedOutput, context)];
+            case 29: throw _d.sent();
+            case 30:
                 parsedBody = parsedOutput.body;
                 throwDefaultError({
                     output: output,
@@ -9398,8 +9997,8 @@ var deserializeAws_restXmlUpdateStreamingDistributionCommandError = function (ou
                     exceptionCtor: __BaseException,
                     errorCode: errorCode,
                 });
-                _d.label = 29;
-            case 29: return [2];
+                _d.label = 31;
+            case 31: return [2];
         }
     });
 }); };
@@ -9644,6 +10243,18 @@ var deserializeAws_restXmlIllegalFieldLevelEncryptionConfigAssociationWithCacheB
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlIllegalOriginAccessConfigurationResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new IllegalOriginAccessConfiguration(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlIllegalUpdateResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -9692,6 +10303,18 @@ var deserializeAws_restXmlInvalidDefaultRootObjectResponse = function (parsedOut
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlInvalidDomainNameForOriginAccessControlResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new InvalidDomainNameForOriginAccessControl(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlInvalidErrorCodeResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -9812,6 +10435,18 @@ var deserializeAws_restXmlInvalidOriginResponse = function (parsedOutput, contex
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlInvalidOriginAccessControlResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new InvalidOriginAccessControl(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlInvalidOriginAccessIdentityResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -9980,6 +10615,18 @@ var deserializeAws_restXmlMissingBodyResponse = function (parsedOutput, context)
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlMonitoringSubscriptionAlreadyExistsResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new MonitoringSubscriptionAlreadyExists(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlNoSuchCachePolicyResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -10064,6 +10711,18 @@ var deserializeAws_restXmlNoSuchInvalidationResponse = function (parsedOutput, c
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlNoSuchMonitoringSubscriptionResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new NoSuchMonitoringSubscription(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlNoSuchOriginResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -10076,6 +10735,18 @@ var deserializeAws_restXmlNoSuchOriginResponse = function (parsedOutput, context
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlNoSuchOriginAccessControlResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new NoSuchOriginAccessControl(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlNoSuchOriginRequestPolicyResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -10148,6 +10819,30 @@ var deserializeAws_restXmlNoSuchStreamingDistributionResponse = function (parsed
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlOriginAccessControlAlreadyExistsResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new OriginAccessControlAlreadyExists(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
+var deserializeAws_restXmlOriginAccessControlInUseResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new OriginAccessControlInUse(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlOriginRequestPolicyAlreadyExistsResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -10496,6 +11191,18 @@ var deserializeAws_restXmlTooManyDistributionsAssociatedToKeyGroupResponse = fun
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlTooManyDistributionsAssociatedToOriginAccessControlResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new TooManyDistributionsAssociatedToOriginAccessControl(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlTooManyDistributionsAssociatedToOriginRequestPolicyResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -10736,6 +11443,18 @@ var deserializeAws_restXmlTooManyLambdaFunctionAssociationsResponse = function (
         return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
     });
 }); };
+var deserializeAws_restXmlTooManyOriginAccessControlsResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
+    var contents, data, exception;
+    return __generator(this, function (_a) {
+        contents = map({});
+        data = parsedOutput.body.Error;
+        if (data["Message"] !== undefined) {
+            contents.Message = __expectString(data["Message"]);
+        }
+        exception = new TooManyOriginAccessControls(__assign({ $metadata: deserializeMetadata(parsedOutput) }, contents));
+        return [2, __decorateServiceException(exception, parsedOutput.body.Error)];
+    });
+}); };
 var deserializeAws_restXmlTooManyOriginCustomHeadersResponse = function (parsedOutput, context) { return __awaiter(void 0, void 0, void 0, function () {
     var contents, data, exception;
     return __generator(this, function (_a) {
@@ -11970,6 +12689,36 @@ var serializeAws_restXmlOrigin = function (input, context) {
         var node = serializeAws_restXmlOriginShield(input.OriginShield, context).withName("OriginShield");
         bodyNode.addChildNode(node);
     }
+    if (input.OriginAccessControlId != null) {
+        var node = __XmlNode.of("string", input.OriginAccessControlId).withName("OriginAccessControlId");
+        bodyNode.addChildNode(node);
+    }
+    return bodyNode;
+};
+var serializeAws_restXmlOriginAccessControlConfig = function (input, context) {
+    var bodyNode = new __XmlNode("OriginAccessControlConfig");
+    if (input.Name != null) {
+        var node = __XmlNode.of("string", input.Name).withName("Name");
+        bodyNode.addChildNode(node);
+    }
+    if (input.Description != null) {
+        var node = __XmlNode.of("string", input.Description).withName("Description");
+        bodyNode.addChildNode(node);
+    }
+    if (input.SigningProtocol != null) {
+        var node = __XmlNode.of("OriginAccessControlSigningProtocols", input.SigningProtocol).withName("SigningProtocol");
+        bodyNode.addChildNode(node);
+    }
+    if (input.SigningBehavior != null) {
+        var node = __XmlNode.of("OriginAccessControlSigningBehaviors", input.SigningBehavior).withName("SigningBehavior");
+        bodyNode.addChildNode(node);
+    }
+    if (input.OriginAccessControlOriginType != null) {
+        var node = __XmlNode
+            .of("OriginAccessControlOriginTypes", input.OriginAccessControlOriginType)
+            .withName("OriginAccessControlOriginType");
+        bodyNode.addChildNode(node);
+    }
     return bodyNode;
 };
 var serializeAws_restXmlOriginCustomHeader = function (input, context) {
@@ -12454,14 +13203,14 @@ var serializeAws_restXmlResponseHeadersPolicyConfig = function (input, context)
         var node = serializeAws_restXmlResponseHeadersPolicySecurityHeadersConfig(input.SecurityHeadersConfig, context).withName("SecurityHeadersConfig");
         bodyNode.addChildNode(node);
     }
-    if (input.CustomHeadersConfig != null) {
-        var node = serializeAws_restXmlResponseHeadersPolicyCustomHeadersConfig(input.CustomHeadersConfig, context).withName("CustomHeadersConfig");
-        bodyNode.addChildNode(node);
-    }
     if (input.ServerTimingHeadersConfig != null) {
         var node = serializeAws_restXmlResponseHeadersPolicyServerTimingHeadersConfig(input.ServerTimingHeadersConfig, context).withName("ServerTimingHeadersConfig");
         bodyNode.addChildNode(node);
     }
+    if (input.CustomHeadersConfig != null) {
+        var node = serializeAws_restXmlResponseHeadersPolicyCustomHeadersConfig(input.CustomHeadersConfig, context).withName("CustomHeadersConfig");
+        bodyNode.addChildNode(node);
+    }
     return bodyNode;
 };
 var serializeAws_restXmlResponseHeadersPolicyContentSecurityPolicy = function (input, context) {
@@ -14776,6 +15525,7 @@ var deserializeAws_restXmlOrigin = function (output, context) {
         ConnectionAttempts: undefined,
         ConnectionTimeout: undefined,
         OriginShield: undefined,
+        OriginAccessControlId: undefined,
     };
     if (output["Id"] !== undefined) {
         contents.Id = __expectString(output["Id"]);
@@ -14804,8 +15554,117 @@ var deserializeAws_restXmlOrigin = function (output, context) {
     if (output["OriginShield"] !== undefined) {
         contents.OriginShield = deserializeAws_restXmlOriginShield(output["OriginShield"], context);
     }
+    if (output["OriginAccessControlId"] !== undefined) {
+        contents.OriginAccessControlId = __expectString(output["OriginAccessControlId"]);
+    }
+    return contents;
+};
+var deserializeAws_restXmlOriginAccessControl = function (output, context) {
+    var contents = {
+        Id: undefined,
+        OriginAccessControlConfig: undefined,
+    };
+    if (output["Id"] !== undefined) {
+        contents.Id = __expectString(output["Id"]);
+    }
+    if (output["OriginAccessControlConfig"] !== undefined) {
+        contents.OriginAccessControlConfig = deserializeAws_restXmlOriginAccessControlConfig(output["OriginAccessControlConfig"], context);
+    }
+    return contents;
+};
+var deserializeAws_restXmlOriginAccessControlConfig = function (output, context) {
+    var contents = {
+        Name: undefined,
+        Description: undefined,
+        SigningProtocol: undefined,
+        SigningBehavior: undefined,
+        OriginAccessControlOriginType: undefined,
+    };
+    if (output["Name"] !== undefined) {
+        contents.Name = __expectString(output["Name"]);
+    }
+    if (output["Description"] !== undefined) {
+        contents.Description = __expectString(output["Description"]);
+    }
+    if (output["SigningProtocol"] !== undefined) {
+        contents.SigningProtocol = __expectString(output["SigningProtocol"]);
+    }
+    if (output["SigningBehavior"] !== undefined) {
+        contents.SigningBehavior = __expectString(output["SigningBehavior"]);
+    }
+    if (output["OriginAccessControlOriginType"] !== undefined) {
+        contents.OriginAccessControlOriginType = __expectString(output["OriginAccessControlOriginType"]);
+    }
+    return contents;
+};
+var deserializeAws_restXmlOriginAccessControlList = function (output, context) {
+    var contents = {
+        Marker: undefined,
+        NextMarker: undefined,
+        MaxItems: undefined,
+        IsTruncated: undefined,
+        Quantity: undefined,
+        Items: undefined,
+    };
+    if (output["Marker"] !== undefined) {
+        contents.Marker = __expectString(output["Marker"]);
+    }
+    if (output["NextMarker"] !== undefined) {
+        contents.NextMarker = __expectString(output["NextMarker"]);
+    }
+    if (output["MaxItems"] !== undefined) {
+        contents.MaxItems = __strictParseInt32(output["MaxItems"]);
+    }
+    if (output["IsTruncated"] !== undefined) {
+        contents.IsTruncated = __parseBoolean(output["IsTruncated"]);
+    }
+    if (output["Quantity"] !== undefined) {
+        contents.Quantity = __strictParseInt32(output["Quantity"]);
+    }
+    if (output.Items === "") {
+        contents.Items = [];
+    }
+    else if (output["Items"] !== undefined && output["Items"]["OriginAccessControlSummary"] !== undefined) {
+        contents.Items = deserializeAws_restXmlOriginAccessControlSummaryList(__getArrayIfSingleItem(output["Items"]["OriginAccessControlSummary"]), context);
+    }
+    return contents;
+};
+var deserializeAws_restXmlOriginAccessControlSummary = function (output, context) {
+    var contents = {
+        Id: undefined,
+        Description: undefined,
+        Name: undefined,
+        SigningProtocol: undefined,
+        SigningBehavior: undefined,
+        OriginAccessControlOriginType: undefined,
+    };
+    if (output["Id"] !== undefined) {
+        contents.Id = __expectString(output["Id"]);
+    }
+    if (output["Description"] !== undefined) {
+        contents.Description = __expectString(output["Description"]);
+    }
+    if (output["Name"] !== undefined) {
+        contents.Name = __expectString(output["Name"]);
+    }
+    if (output["SigningProtocol"] !== undefined) {
+        contents.SigningProtocol = __expectString(output["SigningProtocol"]);
+    }
+    if (output["SigningBehavior"] !== undefined) {
+        contents.SigningBehavior = __expectString(output["SigningBehavior"]);
+    }
+    if (output["OriginAccessControlOriginType"] !== undefined) {
+        contents.OriginAccessControlOriginType = __expectString(output["OriginAccessControlOriginType"]);
+    }
     return contents;
 };
+var deserializeAws_restXmlOriginAccessControlSummaryList = function (output, context) {
+    return (output || [])
+        .filter(function (e) { return e != null; })
+        .map(function (entry) {
+        return deserializeAws_restXmlOriginAccessControlSummary(entry, context);
+    });
+};
 var deserializeAws_restXmlOriginCustomHeader = function (output, context) {
     var contents = {
         HeaderName: undefined,
@@ -15490,8 +16349,8 @@ var deserializeAws_restXmlResponseHeadersPolicyConfig = function (output, contex
         Name: undefined,
         CorsConfig: undefined,
         SecurityHeadersConfig: undefined,
-        CustomHeadersConfig: undefined,
         ServerTimingHeadersConfig: undefined,
+        CustomHeadersConfig: undefined,
     };
     if (output["Comment"] !== undefined) {
         contents.Comment = __expectString(output["Comment"]);
@@ -15505,12 +16364,12 @@ var deserializeAws_restXmlResponseHeadersPolicyConfig = function (output, contex
     if (output["SecurityHeadersConfig"] !== undefined) {
         contents.SecurityHeadersConfig = deserializeAws_restXmlResponseHeadersPolicySecurityHeadersConfig(output["SecurityHeadersConfig"], context);
     }
-    if (output["CustomHeadersConfig"] !== undefined) {
-        contents.CustomHeadersConfig = deserializeAws_restXmlResponseHeadersPolicyCustomHeadersConfig(output["CustomHeadersConfig"], context);
-    }
     if (output["ServerTimingHeadersConfig"] !== undefined) {
         contents.ServerTimingHeadersConfig = deserializeAws_restXmlResponseHeadersPolicyServerTimingHeadersConfig(output["ServerTimingHeadersConfig"], context);
     }
+    if (output["CustomHeadersConfig"] !== undefined) {
+        contents.CustomHeadersConfig = deserializeAws_restXmlResponseHeadersPolicyCustomHeadersConfig(output["CustomHeadersConfig"], context);
+    }
     return contents;
 };
 var deserializeAws_restXmlResponseHeadersPolicyContentSecurityPolicy = function (output, context) {