AWS Client VPN DNS resolution may fail if you're using federated authentication and the signing certificate on your Identity Provider (IdP) has expired.