This project creates a WAF and IP Set that are scoped to the CloudFront IP Ranges. - View it on GitHub