Whitelist IPs of Cloud Front on the firewall

Question

I want to whitelist the IPs of AWS Cloud Front on the firewall to communicate with some services on internal network. Do I've to allow the whole IPs of AWS Region "Global" where the Cloud Front Service resides or should I whitelist all IPs of AWS?

Answer 1

You can get the Locations and IP Address Ranges of CloudFront Edge Servers from this link.

However, these IPs are getting changed once in a while. Therefore it is important to be aware of these changes. This could be done by listening to a SNS topic.